search

fedora-selinux / selinux-policy

selinux-policy for Fedora is a large patch off the mainline
GNU General Public License v2.0
156 stars 157 forks source link

dontaudit execmem for modemmanager #2063

Closed jsegitz closed 3 months ago

jsegitz commented 4 months ago

Calls to g_regex_match_full can use a JIT to improve performance, but that requests execmem. Perfomance isn't priority here, so we don't allow this. Fixes https://bugzilla.redhat.com/show_bug.cgi?id=2149946 https://bugzilla.suse.com/show_bug.cgi?id=1219363

zpytela commented 3 months ago

Merging, thank you.

dreua commented 3 months ago

Can we also have a backport of this on f39? It has the same issue and will be supported for another 6 month or so.

zpytela commented 3 months ago

Can we also have a backport of this on f39? It has the same issue and will be supported for another 6 month or so.

Slated to the next build: https://github.com/fedora-selinux/selinux-policy/pull/2053