From e58227a2b3f9da31b78b65126c3309cbea544561 Mon Sep 17 00:00:00 2001 From: Dan Walsh Date: Nov 08 2011 13:47:34 +0000 Subject: Turn back on allow_execmem boolean --- diff --git a/booleans-targeted.conf b/booleans-targeted.conf index a6550d0..2f5bc2e 100644 --- a/booleans-targeted.conf +++ b/booleans-targeted.conf @@ -1,6 +1,7 @@ # Allow making anonymous memory executable, e.g.for runtime-code generation or executable stack. # deny_execmem = false +allow_execmem = true # Allow making a modified private filemapping executable (text relocation). # diff --git a/selinux-policy.spec b/selinux-policy.spec index 02f9a52..fbe097f 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -17,7 +17,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.10.0 -Release: 55%{?dist} +Release: 55.1%{?dist} License: GPLv2+ Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -483,6 +483,9 @@ SELinux Reference policy mls base module. %endif %changelog +* Tue Nov 8 2011 Dan Walsh 3.10.0-55.1 +- Turn back on allow_execmem boolean + * Mon Nov 7 2011 Miroslav Grepl 3.10.0-55 - Add more MCS fixes to make sandbox working - Make faillog MLS trusted to make sudo_$1_t working