GNOME Bugzilla – Bug 324730
The new selinux policy prevents sol from running
Last modified: 2006-02-23 09:06:48 UTC
Steps to reproduce: When I run sol on FC5T1 I get the following error: sol: error while loading shared libraries: libqthreads.so.12: cannot enable executable stack as shared object requires: Permission denied See for details of the messages in the stack trace box: http://people.redhat.com/drepper/selinux-mem.html Stack trace: I get the following in /var/log/audit/audit.log type=AVC msg=audit(1134331204.241:168): avc: denied { execmem } for pid=5005 comm="sol" scontext=root:system_r:unconfined_t:s0-s0:c0.c255 tcontext=root:system_r:unconfined_t:s0-s0:c0.c255 tclass=process type=SYSCALL msg=audit(1134331204.241:168): arch=40000003 syscall=125 success=no exit=-13 a0=bf8fa000 a1=1000 a2=1000007 a3=b7fea7c8 items=0 pid=5005 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 comm="sol" exe="/usr/bin/sol" Other information:
This doesn't look like a GNOME problem, it looks like a problem in qthreads (the threading library that guile uses - aisleriot uses guile). I base this on the line "libqthreads.so.12: cannot enable executable stack as shared object requires:". I suspect all other programs that use guile and threading suffer from this - its just that Aisleriot is probably the most popular. Either take this bug to the qthreads people or push the Red Hat/Fedora people to sort it out since they are the people setting a policy which software they wish to ship isn't conforming to. In either case there is little I can do.
Forwarded from https://launchpad.net/distros/ubuntu/+source/gnome-games/+bug/29690: Upstream of Freecell have decided to make the game threaded. As a side effect, it means that guile now needs thread support in order for Freecell to work. Guile on PPC and amd64 doesn't have thread support. There are two ways to solve this: 1) Port qthreads on these architectures. This is not terribly hard, but is still a reasonable amount of work to make sure it's right. The reason to not do this is that guile 1.8 no longer uses qthreads, so upstream isn't going to care about this patch (although they will accept it in their stable release). 2) Hack freecell to not use threads for now. The use of threads was presumably some asthetic decision by upstream. Perhaps the freecell help system now provides stunningly useful hints instead of just any available choice? It would be sad to lose that functionality. ;) Tks, Jeff Bailey ---- daniel@bert:~$ sol --variation freecell Backtrace: In /usr/share/sol-games/freecell.scm: 581: 0* (define kill-thread-mutex (make-mutex)) 581: 1* (make-mutex) /usr/share/sol-games/freecell.scm:581:27: In expression (make-mutex): /usr/share/sol-games/freecell.scm:581:27: Unbound variable: make-mutex daniel@bert:~$
For Ubuntu Dapper, we're going to revert the changes (we'll use this patch: http://librarian.launchpad.net/1581548/revert.diff ), I'll upload it with the 2.13.8 package.