SELinux Memory Protection Tests

SELinux restricts certain memory protection operation if the appropriate boolean values enable these checks. The current status of the booleans can be seen set set using four pseudo files: /selinux/booleans/allow_execheap /selinux/booleans/allow_execmem /selinux/booleans/allow_execmod /selinux/booleans/allow_execstack There are four additional error classes. If triggered, the audit logs will show

[yupo5656]

execmem, execmod, execstack, execheap, TEXTREL, mmap, mprotect, なるほど。RWなmmapとRXなmmapに分離するのねー。へー。