mike

What bizarre incantation do I need to get SELinux & PHP & Ingres to
all work together. When I start apache, I get:

kernel: audit(1164275899.231:60): avc: denied { execstack } for
pid=1119 comm="httpd" scontext=system_u:system_r:httpd_t:s0
tcontext=system_u:system_r:httpd_t:s0 tclass=process

and

PHP Warning: PHP Startup: Unable to load dynamic library
'/usr/lib/php/modules/ingres.so' - libcompat.1.so: cannot enable
executable stack as shared object requires: Permission denied in
Unknown on line 0

I've tried:

chcon -t texrel_shlib_t /usr/lib/php/modules/ingres.so

and even:

echo 'hwcap 0 nosegneg' > /etc/ld.so.conf.d/libc6-xen.conf

Mike

versions:
fedora core 5 (fc6) Linux version 2.6.18-1.2798.fc6xen
Ingres 2006 Linux Version II 9.0.4 (int.lnx/103)NPTL login
php 5.2.0
ingres php extension 1.4.0

grant croker

Say "Red Lorry Yellow Lorry" several times very quickly?

The file causing the violation is libcompat.1.so. The same command
against that file and another should allow Ingres and SELinux to work
together:

chcon -t texrel_shlib_t $II_SYSTEM/ingres/lib/libcompat.1.so
chcon -t texrel_shlib_t $II_SYSTEM/ingres/lib/libbecompat.1.so

I have not tried PHP + Ingres in an SELinux environment so if you see
any other messages let me know. If you think you have found a bug can
you log it via http://pecl.php.net/ingres

regards

grant

--
Grant Croker, grantc@php.net |||
Software Engineer, Ingres Corp d-_-b
http://ingres.com