Ask Your Question
-1

I need selinux execstack help

asked 2017-09-24 16:12:08 -0600

toddandmargo gravatar image

Hi All,

I am getting the follow error message :

Java HotSpot(TM) 64-Bit Server VM warning: You have loaded library /rla/buju/lib/libwrapper.so which might have disabled stack guard. The VM will try to fix the stack guard now. It's highly recommended that you fix the library with ''execstack -c <libfile>', or link it with '-z noexecstack'.

Problem: /sys/fs/selinux/class/process/perms/execstack has permissions of 444. Mean no execute. I really don't want to change the permissions until I know what I am doing.

I am getting no SELinux warning pop ups.

Many thanks, -T

edit retag flag offensive close merge delete

2 Answers

Sort by ยป oldest newest most voted
1

answered 2017-09-24 20:39:19 -0600

sideburns gravatar image

If bash can't find execstack, that means that it's not installed.

sudo dnf install -y exackstack

will take care of that.

edit flag offensive delete link more

Comments

That did the trick. I wonder what /sys/fs/selinux/class/process/perms/execstack was all about?

toddandmargo gravatar imagetoddandmargo ( 2017-09-24 22:04:08 -0600 )edit
0

answered 2017-09-24 17:04:48 -0600

villykruse gravatar image

execstack is a command you can run to set or clear a flag in the library file. You run it like this

execstack -c /rla/buju/lib/libwrapper.so

The flag tells the linux kernel if the program can run code stored on the stack. Normally that should not be required.

edit flag offensive delete link more

Comments

(as root) execstack -c /rla/buju/lib/libwrapper.so bash: execstack: command not found

toddandmargo gravatar imagetoddandmargo ( 2017-09-24 17:50:23 -0600 )edit

Question Tools

1 follower

Stats

Asked: 2017-09-24 16:12:08 -0600

Seen: 148 times

Last updated: Sep 24 '17