While trying to check if -lgi will run on bert (on RHEL5,fsv404 and matlab r2008a), I received the following message from SELinux (please see summary below):
Sorry to be so cautious, but do I change to allow_execheap boolean? The system-wide impact statement makes me a little nervous...
Many thanks for any advice you can provide, Jenifer
Summary:
SELinux is preventing MATLAB from changing the access protection of memory on the heap.
Detailed Description:
[SELinux is in permissive mode, the operation would have been denied but was permitted due to permissive mode.]
The MATLAB application attempted to change the access protection of memory on the heap (e.g., allocated using malloc). This is a potential security problem. Applications should not be doing this. Applications are sometimes coded incorrectly and request this permission. The SELinux Memory Protection Tests (http://people.redhat.com/drepper/selinux-mem.html) web page explains how to remove this requirement. If MATLAB does not work and you need it to work, you can configure SELinux temporarily to allow this access until the application is fixed. Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi) against this package.
Allowing Access:
If you want MATLAB to continue, you must turn on the allow_execheap boolean. Note: This boolean will affect all applications on the system.
The following command will allow this access:
setsebool -P allow_execheap=1
Additional Information:
Source Context root:system_r:unconfined_t:SystemLow-SystemHigh Target Context root:system_r:unconfined_t:SystemLow-SystemHigh Target Objects None [ process ] Source MATLAB Source Path /usr/local/MATLAB_R2008a/bin/glnxa64/MATLAB Port <Unknown> Host localhost.localdomain Source RPM Packages Target RPM Packages Policy RPM selinux-policy-2.4.6-137.el5 Selinux Enabled True Policy Type targeted MLS Enabled True Enforcing Mode Permissive Plugin Name allow_execheap Host Name localhost.localdomain Platform Linux localhost.localdomain 2.6.18-92.el5 #1 SMP Tue Apr 29 13:16:15 EDT 2008 x86_64 x86_64 Alert Count 1 First Seen Thu 29 May 2008 01:55:19 PM CDT Last Seen Thu 29 May 2008 01:55:19 PM CDT Local ID 547d8303-5b60-4883-adc1-5da588da0b2a Line Numbers
Raw Audit Messages
host=localhost.localdomain type=AVC msg=audit(1212087319.314:56): avc: denied { execheap } for pid=9538 comm="MATLAB" scontext=root:system_r:unconfined_t:s0-s0:c0.c1023 tcontext=root:system_r:unconfined_t:s0-s0:c0.c1023 tclass=process
host=localhost.localdomain type=SYSCALL msg=audit(1212087319.314:56): arch=c000003e syscall=10 success=yes exit=0 a0=68d4000 a1=553 a2=7 a3=3 items=0 ppid=9460 pid=9538 auid=0 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts5 ses=1 comm="MATLAB" exe="/usr/local/MATLAB_R2008a/bin/glnxa64/MATLAB" subj=root:system_r:unconfined_t:s0-s0:c0.c1023 key=(null)