On 2017-04-17, Steve Shockley <steve.shock...@shockley.net> wrote: > After upgrading my OpenNMS box to 6.1 (from 6.0) I noticed that the > polling scripts weren't running. I tracked it down to needing wxallow > on /usr/local so python2.7 would run (otherwise "access denied"). I > think python2.7 wasn't marked as needing wxallow, or I don't know how to > check. Is this expected?
The python interpreter binaries are marked as needing w+x. They don't actually need w+x themselves but you might load a module which needs it (webkit, maybe others). The kernel enforces that such binaries can only be run from a wxallow filesystem. > Also, I didn't see anything in syslog about it. Is there a way to > enable logging when a program attempts to run but can't? The output > message was just "access denied". Not without patching the kernel - it's not logged.
