On 09/10/2015 02:21 PM, Stephen Smalley wrote:
> On 09/10/2015 02:05 PM, Elena Reshetova wrote:
>> Hi,
>>
>> We are seeing these errors:
>>
>> [ 10.510123] type=1400 audit(1263588520.304:55): avc: denied
>>
>> { execmod }
>>
>> for pid=3294 comm="mediaserver" path="/system/lib/libxyz.so" dev="dm-0"
>> ino=1510 scontext=u:r:mediaserver:s0 tcontext=u:object_r:system_file:s0
>> tclass=file permissive=1
>>
>>
>> When library is compiled with -fpic, it doesn't solve the issue and it
>> isn't fully clear what else can cause execmod.
>>
>> Any suggestions?
>
> Can you confirm that there are no text relocations, e.g. see:
> http://www.akkadia.org/drepper/textrelocs.html
> and use eu-readelf and eu-findtextrel.
This might also be helpful:
https://wiki.gentoo.org/wiki/Hardened/Textrels_Guide
_______________________________________________
Seandroid-list mailing list
[email protected]
To unsubscribe, send email to [email protected].
To get help, send an email containing "help" to
[email protected].
