Product: Fedora
https://bugzilla.redhat.com/show_bug.cgi?id=808350
--- Comment #16 from Jerry James <loganjerry(a)gmail.com> ---
If the mprotect() calls cannot be folded into mmap() calls, then an alternative
is to talk to the SELinux people about writing policy for racket that allows it
to call mprotect() with PROT_EXEC. I had to do that for the gcl package. Gcl
allocates blocks of memory, then repurposes those blocks, so sometimes they
need to be executable and sometimes not. There is no way to avoid using
mprotect() to flip PROT_EXEC on and off with its memory management scheme, so
we wrote a policy to create a gcl_exec_t type to allow that. I don't recommend
it, but it is a possible avenue to take if all else fails.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=Mcb8g1EhU8&a=cc_unsubscribe