Valve Fixes Portal 2 To Work With SELinux

[phoronix]

Phoronix: Valve Fixes Portal 2 To Work With SELinux

Valve has fixed an issue with middle-ware used by Portal 2 so that on Linux users can now have SELinux enabled...

http://www.phoronix.com/vr.php?view=MTYzMTU

[Rexilion]

This is what makes Linux so support so difficult.

They might have fixed it for Selinux for now. But wait until the next policy 'update'.

[Calinou]

This is what makes Linux so support so difficult.

They might have fixed it for Selinux for now. But wait until the next policy 'update'.

Hey, it's something about MP3 support.

[r1348]

No, the default policy doesn't allow executable heap memory, something that the mp3 decoder in Source somehow did, and that isn't going to change any soon, I would say ever.

One should wonder why it was even working on other systems, I thought this kind of protection was pretty standard...

[dee.]

This is what makes Linux so support so difficult.

They might have fixed it for Selinux for now. But wait until the next policy 'update'.

Yeah, poor widdle developers, having to comply with security policies... we should be more like windows, where they patch in the operating system full of hacks, spaghetti code and holes to compensate for all the stupidity and incompentence of 3rd-party developers!

[stqn]

Why the hell did they use MP3 in Portal 2? I thought vorbis was pretty standard in games even years ago.

[Rexilion]

Hey, it's something about MP3 support.

Did you read the article?

No, the default policy doesn't allow executable heap memory, something that the mp3 decoder in Source somehow did, and that isn't going to change any soon, I would say ever.

Yeah, so I guess they either added a slow fallback or made a proper Selinux security marking.

One should wonder why it was even working on other systems, I thought this kind of protection was pretty standard...

Selinux is part of the kernel already. But as far as I know, only Redhat's distro's enable it along with properly maintained policy's. Gentoo has Selinux in their hardened profiles but that is not intended for everyone to use I think.

Yeah, poor widdle developers, having to comply with security policies... we should be more like windows, where they patch in the operating system full of hacks, spaghetti code and holes to compensate for all the stupidity and incompentence of 3rd-party developers!

Leaked Windows source code has shown to be pretty cleanly written. Check your favorite torrent tracker for a tarball. This issue was caused by distribution enforcing more restrictive security measures. Instead of ignoring it the 3rd-party developers fixed it, which I consider a good thing and not a sign of stupidity and incompetence.

[plantroon]

Idk why but Windows always seems cleaner than Linux to me. Performance-wise, Windows is much better for home use / gaming use. For development, Windows is a pita to even set up. Customization is also better on Linux. Since I'm not a developer and I have older hardware, Windows is 5 times faster in most scenarios. However, there are certain things that I really love about Linux... but there's only really few of them

[r1348]

Idk why but Windows always seems cleaner than Linux to me. Performance-wise, Windows is much better for home use / gaming use. For development, Windows is a pita to even set up. Customization is also better on Linux. Since I'm not a developer and I have older hardware, Windows is 5 times faster in most scenarios. However, there are certain things that I really love about Linux... but there's only really few of them

Hey dude enough with the details avalanche, could you please be more generic?

[r1348]

Selinux is part of the kernel already. But as far as I know, only Redhat's distro's enable it along with properly maintained policy's. Gentoo has Selinux in their hardened profiles but that is not intended for everyone to use I think.

Yeah I knew that, I somehow took for granted that other security systems like AppArmor were enforcing a r/w-only heap memory policy, I was mistaken. Oh well, even happier to use Fedora.