Page 1 of 1

Problem with Atomic kernel?

Posted: Mon Aug 25, 2008 1:04 pm
by RichardM
My RHEL5 server depends heavily on a Perl module "Math::Pari"

Today I needed to reboot the server - and as a result I think I have activated ASL's kernel and GRSecurity stuff. :?

Unfortunately this is causing (I think) Math::Pari to fail:

Can't load
'/usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/auto/Math/Pari/Pari.so'
for module Math::Pari:
/usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/auto/Math/Pari/Pari.so:
cannot enable executable stack as shared object requires: Permission denied at /usr/lib/perl5/5.8.8/i386-linux-thread-multi/DynaLoader.pm line 230.


Although in /etc/asl/config I have "ALLOW_kmod_loading="no", in the GUI I see GRSecurity stuff as switched on.

Any ideas?

Posted: Mon Aug 25, 2008 2:50 pm
by scott
cannot enable executable stack as shared object requires: Permission denied at /usr/lib/perl5/5.8.8/i386-linux-thread-multi/DynaLoader.pm line 230. <- this lies. It does not need an executable stack.Turn that off with:

execstack -c /usr/lib/perl5/5.8.8/i386-linux-thread-multi/DynaLoader.pm


What RPM does that file belong to? rpm -qf /usr/lib/perl5/5.8.8/i386-linux-thread-multi/DynaLoader.pm

Re: Problem with Atomic kernel?

Posted: Mon Aug 25, 2008 4:26 pm
by breun
RichardM wrote:Today I needed to reboot the server - and as a result I think I have activated ASL's kernel and GRSecurity stuff. :?
That's actually a good thing, really.
Although in /etc/asl/config I have "ALLOW_kmod_loading="no", in the GUI I see GRSecurity stuff as switched on.
ALLOW_kmod_loading=no means that the ASL kernel won't allow loading kernel modules (at runtime).

Posted: Mon Aug 25, 2008 4:30 pm
by RichardM
scott wrote:cannot enable executable stack as shared object requires: Permission denied at /usr/lib/perl5/5.8.8/i386-linux-thread-multi/DynaLoader.pm line 230. <- this lies. It does not need an executable stack.Turn that off with:

execstack -c /usr/lib/perl5/5.8.8/i386-linux-thread-multi/DynaLoader.pm


What RPM does that file belong to? rpm -qf /usr/lib/perl5/5.8.8/i386-linux-thread-multi/DynaLoader.pm
It belongs to perl-5.8.8-10.el5_2.3

The execstack -c fixed it.

Excellent! Thanks so much.