----- Original Message -----
From: "Jiri Benc" <jbenc(a)suse.cz>
Cc: <jiri(a)malakovi.cz>cz>; "Jeff Mahoney" <jeffm(a)suse.com>
Sent: Monday, September 20, 2010 1:48 PM
Subject: Re: [opensuse-kernel] Question about Apparmor kernel code
On Sun, 19 Sep 2010 12:09:13 +0200, Jiri Malak wrote:
I would like to fix Bug 551799 - Dosemu
doesn't start except from root account which is caused by
Apparmor code in kernel.
This should be solved by setting CONFIG_LSM_MMAP_MIN_ADDR to 0,
Jeff, what do you think? Currently, it's 4096 in openSUSE-11.3 branch.
It is simplest fix but it circumvents security rules.
If I understand correctly this problem then it should be handled by sysctl command (by
setup mmap_min_addr = 0 and
by Apparmor profile capability CAP_ROWIO.
To unsubscribe, e-mail: opensuse-kernel+unsubscribe(a)opensuse.org
For additional commands, e-mail: opensuse-kernel+help(a)opensuse.org