Bug 1015758
Summary: | SELinux is preventing /home/mikhail/.local/share/Steam/SteamApps/common/dota 2 beta/dota_linux from using the 'execheap' accesses on a process. | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Mikhail <mikhail.v.gavrilov> |
Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> |
Status: | CLOSED CANTFIX | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | unspecified | Docs Contact: | |
Priority: | unspecified | ||
Version: | 20 | CC: | dominick.grift, dwalsh, lvrabec, mgrepl |
Target Milestone: | --- | ||
Target Release: | --- | ||
Hardware: | x86_64 | ||
OS: | Unspecified | ||
Whiteboard: | abrt_hash:2965a1f7cfd51103b0a7557b55aeac4bae63564f4a77f3d4774af6887c262a4a | ||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2013-10-07 13:24:56 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Mikhail
2013-10-05 07:15:18 UTC
***** Plugin allow_execheap (53.1 confidence) suggests ******************** If you do not think /home/mikhail/.local/share/Steam/SteamApps/common/dota 2 beta/dota_linux should need to map heap memory that is both writable and executable. Then you need to report a bug. This is a potentially dangerous access. Do contact your security administrator and report this issue. ***** Plugin catchall_boolean (42.6 confidence) suggests ****************** If you want to allow selinuxuser to execheap Then you must tell SELinux about this by enabling the 'selinuxuser_execheap' boolean. You can read 'None' man page for more details. Do setsebool -P selinuxuser_execheap 1 The alert told you what to do. Basically games do some nasty stuff but if you want to play them you need to turn off the SELinux controls. # setsebool -P selinuxuser_execheap 1 |