Home page logo

metasploit logo Metasploit mailing list archives

Re: selinux prevents msfconsole from running because of 'execstack'
From: Ramon de Carvalho Valle <ramon () metasploit com>
Date: Thu, 07 Apr 2011 12:46:32 -0300

You can just set the SELinux boolean allow_execstack.

setsebool allow_execstack on

On 04/07/2011 12:32 AM, Martin Schneider wrote:
hey guys i am currently using metasploit 3.6.0 and i am unable to run
msfconsole on my fedora 14 box. When i try to run msfconsole i am
alerted by SElinux off an error and permission than becomes denied to
the msfconsole command

Here is a copy of the error message:

# msfconsole
/opt/framework-3.6.0/msf3/lib/rex/text.rb:1:in `require':
*libcrypto.so.0.9.8*: cannot enable executable stack as shared object
requires: *Permission denied* -
        from /opt/framework-3.6.0/msf3/lib/rex/text.rb:1:in `<top
        from /opt/framework-3.6.0/msf3/lib/rex.rb:44:in `require'
        from /opt/framework-3.6.0/msf3/lib/rex.rb:44:in `<top (required)>'
        from /opt/framework-3.6.0/msf3/msfconsole:117:in `require'
        from /opt/framework-3.6.0/msf3/msfconsole:117:in `<main>'

Here is the alert error message i receive from SElinux...

*SELinux has detected a problem.*

The source process: .ruby.bin
Attempted this access: *execstack*
On this process:

I know that i am going to have to write some kind of policy with SELinux
to allow "execstack" in order to be able to run msfconsole however, i am
worried because i know what kind of damage execstack can do...

I am hoping that maybe someone may have come across this problem either
on their fedora or rhel box. If anyone out there has any advice on how i
could fix this problem so i can run msfconsole or point me in the right
direction i would SO appreciate it, i really would.

Thank you everyone for your time,



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]