Process Running as unconfined_t yet SELinux Prevents Application Execution
Issue
- Process running as
unconfined_tyet SELinux still prevents its execution. - Encountering
Permission deniedwhen running extraneous libraries unless allow_execmod is enabled in SElinux. - SElinux does not deny permission when using custom shared objects over NFS.
- SElinux reports
dlopenfailure withcannot restore segment prot after relocmessage. - Under RHEL 6, SElinux does not deny permission for extraneous libraries by default as it does under RHEL 5.
The execmod control within SElinux under RHEL 5 prohibits the execution of writable memory in efforts to help prevent malicious exploitation. SElinux utilizes this protection to block the execution of writable memory, regardless of if a process is confined.
Environment
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 5
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.
