Hide Forgot
Description of problem: I tried to rebuild hugs98-2006.09-8.el6 on mock on my 7.3 machine with latest mock from epel7. i686 build failed, build.log has this error: runhugs: Error occurred ERROR - mallocBytesRWX: failed to protect 0x0x93e65a8 And selinux protection kicks in: type=AVC msg=audit(1480885580.928:194825): avc: denied { execheap } for pid=32451 comm="ffihugs" scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:unconfined_service_t:s0 tclass=process Not: this is i686 poblem. x86_64 build fine. Please disable executable heap on i686 too.
Note: I was building for epel6, build system is 7.3 + epel7 mock.
I see. Does hugs98-2006.09-19.el7 build better on el6?
Exactly same problem. There are actually several AVCs from build. Last one is comm="runhugs", previous ones are comm="ffihugs" You won't hit this on epel7 because there is no i686 build.
Okay thanks for reporting this. Could you kindly check if this srpm builds okay on i686? https://petersen.fedorapeople.org/hugs98-2006.09-20.el7.src.rpm
Created attachment 1230536 [details] Selinux denials from i686 build No change, Audit log shows bad behaviour.
Thanks for testing: do you have any patch in mind?
No. Problem is somewhere deep inside software (broken design). Real problem is in fedora buildsystem which has selinux permissive allowing you to build the package.
Right, I see thanks. Is there a koji bug about that?
As you may know Hugs is old and no longer maintained so I am not very optimistic about fixing this, unless there is patch floating around.
Why do you build that if it's old and no longer maintained? There is plenty of reasons to deprecate package.
I thought it is still useful to have it in EPEL for reference. Does hugs98 work on RHEL6 i686?