Jump to letter: [ ABCDEFGHIJKLMNOPQRSTUVWXYZ ]

libselinux - SELinux library and simple utilities

Description:

Security-enhanced Linux is a feature of the Linux® kernel and a number
of utilities with enhanced security functionality designed to add
mandatory access controls to Linux.  The Security-enhanced Linux
kernel contains new architectural components originally developed to
improve the security of the Flask operating system. These
architectural components provide general support for the enforcement
of many kinds of mandatory access control policies, including those
based on the concepts of Type Enforcement®, Role-based Access
Control, and Multi-level Security.

libselinux provides an API for SELinux applications to get and set
process and file security contexts and to obtain security policy
decisions.  Required for any applications that use the SELinux API.

Packages

Add patch from dbhole@redhat.com to initialize thread keys to -1
Errors were being seen in libpthread/libdl that were related
to corrupt thread specific keys. Global destructors that are called on dl 
unload. During destruction delete a thread specific key without checking 
if it has been initialized. Since the constructor is not called each time 
(i.e. key is not initialized with pthread_key_create each time), and the 
default is 0, there is a possibility that key 0 for an active thread gets 
deleted. This is exactly what is happening in case of OpenJDK.

Workaround patch that initializes the key to -1. Thus if the constructor is not
called, the destructor tries to delete key -1 which is deemed invalid by 
pthread_key_delete, and is ignored.

Listing created by Repoview-0.6.5-2.fc15