Re: Fw: selinux in fedora 10 regarding text relocation in wine and mono.

2008-11-30 Thread Hin-Tak Leung
Hi all,

I had managed to fix my selinux/wine/mono problem in fedora 10... it is 
actually two issues, in fact:

1) fedora 10 ships some much stricter selinux policies (but make some exception 
for wine).

2) I have kernel support for miscellaneous binary formats
enabled and have win32 PE registration in the kernel, and run
win32 mono.exe (or other PE executables) direct from time to time.

so wine [path]/mono.exe [.NET.exe] works within the restriction of f10 
selinux policies, but [path]/mono.exe [.NET.exe] does not. I could either 
relax the execmod policy in selinux, if I want to run any PE .exe's 
wholesale; or I just need to remember always putting wine in front of PE 
.exe's I want to run...

Sorry for the noise.


  




Fw: selinux in fedora 10 regarding text relocation in wine and mono.

2008-11-29 Thread Hin-Tak Leung
I sent this a few days ago from my other e-mail alias and it hasn't come 
back, so it probably got lost in the spam-filtering - anybody has similiar 
issue?  

 So I have upgraded to fedora 10... now when I run wine with
 mono for some .Net application I get selinux blocking it,
 saying:
 
 -
  
 The mscorsvw.exe application attempted to load
 /home/Hin-Tak/.wine/drive_c/windows/Microsoft.NET/Framework/v2.0.50727/mscorsvw.exe
 which requires text relocation. This is a potential security
 problem. Most libraries do not need this permission.
 Libraries are sometimes coded incorrectly and request this
 permission. 
 
 --
 
 And a few other similar errors. Should I file this with
 redhat with their shipped policy, wine or mono? I guess it
 should be with redhat, but
 somehow I have the impression that I might be asked to file
 this with wine-devel.
 
 Any thoughts on this?