Hi,
it appears the optimized versions of libcrypto.so.0.9.8 still contain
text relocations -- this makes selinux complain about 'execmod'
permissions:
avc: denied { execmod } for pid=1875 comm="ntpdate" \
path="/usr/lib/i686/cmov/libcrypto.so.0.9.8" dev=sda8 ino=325290 \
scontext=system_u:system_r:initrc_t:s0 \
tcontext=system_u:object_r:lib_t:s0 tclass=file
this is valid for i486, i586, and i686/cmov versions
Looking at the build system, it seems the culprits are the following
files:
crypto/x86cpuid-elf.s
crypto/des/dx86-elf.s
crypto/aes/ax86-elf.s
crypto/bf/bx86-elf.s
which are generated by corresponding scripts in crypto/{des,aes,bf}/asm
The text relocs are not present in non-optimized (i386) versions
Simon
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [email protected]
Automated List Manager [EMAIL PROTECTED]
