Bug 1150106
Summary: | SELinux is preventing luajit from using the 'execmem' accesses on a process. | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | kuchiman <kuc4iman> |
Component: | prosody | Assignee: | Robert Scheck <redhat-bugzilla> |
Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | unspecified | Docs Contact: | |
Priority: | unspecified | ||
Version: | 21 | CC: | dominick.grift, dwalsh, jkaluza, jorti, jsastreh, lvrabec, mgrepl, plautrba, redhat-bugzilla, tomek |
Target Milestone: | --- | ||
Target Release: | --- | ||
Hardware: | x86_64 | ||
OS: | Unspecified | ||
Whiteboard: | abrt_hash:d1115ff8184d928cd37e111d4d9d1deb39f8132a0a6a491503829166cff0dd58 | ||
Fixed In Version: | selinux-policy-3.13.1-105.fc21 | Doc Type: | Bug Fix |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2015-05-20 19:09:56 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
kuchiman
2014-10-07 12:47:29 UTC
Does prosody need to have "execmem"? I am no lua expert but I would guess "yes" because of luajit rather lua. And luajit is needed (at least in Fedora, not in RHEL) because Fedora still ships a supported version (of luajit) while lua in Fedora is too new. But again, I might be wrong here this is what I at least got. b70698eed449b075956fb47dace36aa9ac192efe fixes this in git. commit a3c2689c0de4e62f836b98f9e339fb872df02073 Author: Dan Walsh <dwalsh> Date: Sat Jan 3 08:47:31 2015 -0500 Allow prosody_t to execmem, since it is using loajit. This package has changed ownership in the Fedora Package Database. Reassigning to the new owner of this component. This package has changed ownership in the Fedora Package Database. Reassigning to the new owner of this component. prosody-0.9.8-1.fc20, prosody-0.9.8-1.fc21 and prosody-0.9.8-1.fc22 should not have any dependency on luajit anymore, rather they use compat-lua (as it was advised by prosody upstream). |