On Wed, 2006-03-29 at 14:43 -0800, Florin Andrei wrote:
On Wed, 2006-03-29 at 23:18 +0100, Paul Howarth wrote:
On Wed, 2006-03-29 at 13:47 -0800, Florin Andrei wrote:
SELinux does log a few things, but it says "granted" which is why glxgears works.
Perhaps you have the booleans allow_execmem and allow_execmod on?
# getsebool -a | grep -e execmem -e execmod allow_execmem --> on allow_execmod --> on
Isn't that the default? I know I tweaked a few things, but I don't think I changed those. I could be wrong, though.
Not sure; all my FC5 systems are upgrades from FC4 so I don't have a clean install to check against. They all have the following though:
allow_execheap --> off allow_execmem --> on allow_execmod --> off allow_execstack --> on allow_java_execstack --> off
Paul.