diff options
| author | Xavier Hernandez <xhernandez@datalab.es> | 2017-01-13 13:54:35 +0100 |
|---|---|---|
| committer | Jeff Darcy <jdarcy@redhat.com> | 2017-02-02 07:02:28 -0500 |
| commit | db80efc8d5cc24597de636d8df2e5a9ce81d670d (patch) | |
| tree | 1ee68e485a8d9dc70028a7e1afc19907d75df723 /xlators/cluster/ec/src/ec-messages.h | |
| parent | 85d7f1d1ee24ac400d4aa223478727643532693a (diff) | |
cluster/ec: fix selinux issues with mmap()
EC uses mmap() to create a memory area for the dynamic code. Since
the code is created on the fly and executed when needed, this region
of memory needs to have write and execution privileges.
This combination is not allowed by default by selinux. To solve the
problem a file is used as a backend storage for the dynamic code and
it's mapped into two distinct memory regions, one with write access
and the other one with execution access. This approach is the
recommended way to create dynamic code by a program in a more secure
way, and selinux allows it.
Additionally selinux requires that the backend file be stored in a
directory marked with type bin_t to be able to map it in an executable
area. To satisfy this condition, GLUSTERFS_LIBEXECDIR has been used.
This fix also changes the error check for mmap(), that was done
incorrectly (it checked against NULL instead of MAP_FAILED), and it
also correctly propagates the error codes and makes sure they aren't
silently ignored.
Change-Id: I71c2f88be4e4d795b6cfff96ab3799c362c54291
BUG: 1402661
Signed-off-by: Xavier Hernandez <xhernandez@datalab.es>
Reviewed-on: https://review.gluster.org/16405
Smoke: Gluster Build System <jenkins@build.gluster.org>
NetBSD-regression: NetBSD Build System <jenkins@build.gluster.org>
CentOS-regression: Gluster Build System <jenkins@build.gluster.org>
Reviewed-by: Jeff Darcy <jdarcy@redhat.com>
Diffstat (limited to 'xlators/cluster/ec/src/ec-messages.h')
| -rw-r--r-- | xlators/cluster/ec/src/ec-messages.h | 16 |
1 files changed, 15 insertions, 1 deletions
diff --git a/xlators/cluster/ec/src/ec-messages.h b/xlators/cluster/ec/src/ec-messages.h index dcdf50b9503..b034e9f203a 100644 --- a/xlators/cluster/ec/src/ec-messages.h +++ b/xlators/cluster/ec/src/ec-messages.h @@ -45,7 +45,7 @@ */ #define GLFS_EC_COMP_BASE GLFS_MSGID_COMP_EC -#define GLFS_NUM_MESSAGES 73 +#define GLFS_NUM_MESSAGES 75 #define GLFS_MSGID_END (GLFS_EC_COMP_BASE + GLFS_NUM_MESSAGES + 1) /* Messaged with message IDs */ #define glfs_msg_start_x GLFS_EC_COMP_BASE, "Invalid: Start of messages" @@ -569,6 +569,20 @@ */ #define EC_MSG_MATRIX_FAILED (GLFS_EC_COMP_BASE + 73) +/*! + * @messageid + * @diagnosis + * @recommendedaction + */ +#define EC_MSG_DYN_CREATE_FAILED (GLFS_EC_COMP_BASE + 74) + +/*! + * @messageid + * @diagnosis + * @recommendedaction + */ +#define EC_MSG_DYN_CODEGEN_FAILED (GLFS_EC_COMP_BASE + 75) + /*------------*/ #define glfs_msg_end_x GLFS_MSGID_END, "Invalid: End of messages" |