From: buzz lightyear (buzzheavyyearhotmail.com)
Date: Thu Jun 16 2005 - 02:16:37 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

>WAG: SELinux? Which Linux distro?

Yes, sorry - forgot to say it was fedora3/selinux

>
>I don't really even know what libOCFPCSC1.so is, if you built it
>yourself or if you have source for it, but those messages are often a
>sign of a shared library built as non-PIC, and an enforcing SELinux
>policy which doesn't contain an explicit exception for that particular
>library.

java wraps code around a binary interface to pscslite - libOCFPCSC1.so -
code freely available from muscle

>
>If you have the source, try compiling it as PIC; or if not, ask whoever
>shipped it to do that for you. If that fails, try setting the policy to
>non-enforcing mode, or modifying the policy.
>

PIC made no difference, but learning about policy on selinux did! I set the
policy to permissive in /etc/selinux/policy to permissive.

So, a huge thanks for the input - the usual stress of not understanding the
problem has dissipated!

However, I am concerned about the fact that I've had to downgrade security
on selinux just to get the driver to work (running ldconfig must have
originally upped this). Isn't there any way of having an enforced policy
while allowing the driver to work?

Anyhow, thanks again for the input

Nick

_________________________________________________________________
Use MSN Messenger to send music and pics to your friends
http://messenger.msn.co.uk

_______________________________________________
Muscle mailing list
Musclelists.musclecard.com
http://lists.drizzle.com/mailman/listinfo/muscle

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]