Hi,
I've upgraded a (gentoo x86 selinux) system from MySQL 4.0 to 4.1, and
since then some of the software that uses mysql-libs refuse to run
without 'shlib_t:file execmod'.
ie: when starting postfix (built and rebuilt with mysql support):
postfix: error while loading shared
libraries: /usr/lib/libmysqlclient.so.14: cannot restore segment prot
after reloc: Permission denied
And here is the audit message:
[ 3159.289877] audit(1130082418.254:1085): avc: denied { execmod } for
pid=7905 comm="postfix" name="libmysqlclient.so.14.0.0" dev=md3
ino=84506 scontext=root:sysadm_r:postfix_postdrop_t
tcontext=system_u:object_r:shlib_t tclass=file
But other software does not needed it (mysql client, pdns, etc) even
though they are linked to the same library file...
What gives?
Thanks
Antoine
--
[email protected] mailing list
