libffi & fork

[Anthony Green]

On Tue, May 1, 2012 at 3:56 AM, Andrew Haley <aph@redhat.com> wrote:
>> Hmm.. check out this bug:
>> https://bugzilla.redhat.com/show_bug.cgi?id=772657
>>
>> If our selinux state detection code really is this fragile, maybe we
>> should link against libselinux and use is_selinux_enabled() as
>> suggested in comment 4.
>
> Would it not make far more sense simply to try to map the region
> and fall back if that fails?

Wouldn't that generate spurious SELinux warnings/errors?  I'd rather
not have that as expected behaviour.

AG