Attachment 297487 Details for Bug 436833 – report from selinux

report from selinux

SELinux.txt (text/plain), 1.89 KB, created by Phoebe on 2008-03-10 18:31:12 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Phoebe

Created: 2008-03-10 18:31:12 UTC

Size: 1.89 KB

patch

obsolete

>Summary
>SELinux is preventing /usr/caen/matlab74/bin/glnxa64/MATLAB from changing the access protection of memory on the heap.
>
>Detailed Description
>The /usr/caen/matlab74/bin/glnxa64/MATLAB application attempted to change the access protection of memory on the heap (e,g., allocated using malloc). This is a potential security problem. Applications should not be doing this. Applications are sometimes coded incorrectly and request this permission. The SELinux Memory Protection Tests web page explains how to remove this requirement. If /usr/caen/matlab74/bin/glnxa64/MATLAB does not work and you need it to work, you can configure SELinux temporarily to allow this access until the application is fixed. Please file a bug report against this package.
>
>Allowing Access
>If you want /usr/caen/matlab74/bin/glnxa64/MATLAB to continue, you must turn on the allow_execheap boolean. Note: This boolean will affect all applications on the system.The following command will allow this access:setsebool -P allow_execheap=1
>
>Additional Information
>Source Context:Â Â user_u:system_r:unconfined_t
>Target Context:Â Â user_u:system_r:unconfined_t
>Target Objects:Â Â None [ process ]
>Affected RPM Packages:Â Â Â 
>Policy RPM:Â Â selinux-policy-2.4.6-106.el5_1.3
>Selinux Enabled:Â Â True
>Policy Type:Â Â targeted
>MLS Enabled:Â Â True
>Enforcing Mode:Â Â Enforcing
>Plugin Name:Â Â plugins.allow_execheap
>Host Name:Â Â dowlinglab7.engin.umich.edu
>Platform:Â Â Linux dowlinglab7.engin.umich.edu 2.6.18-53.1.14.el5 #1 SMP Tue Feb 19 07:18:46 EST 2008 x86_64 x86_64
>Alert Count:Â Â 1276
>Line Numbers:Â Â Â 
>
>Raw Audit Messages :
>avc: denied { execheap } for comm="MATLAB" egid=500 euid=500 exe="/usr/caen/matlab74/bin/glnxa64/MATLAB" exit=0 fsgid=500 fsuid=500 gid=500 items=0 pid=27044 scontext=user_u:system_r:unconfined_t:s0 sgid=500 subj=user_u:system_r:unconfined_t:s0 suid=500 tclass=process tcontext=user_u:system_r:unconfined_t:s0 tty=pts1 uid=500

Actions: View

Attachments on bug 436833: 297487 | 297800