Any selinux experts here?

SL5 comes with a suggestion to set selinux to "enforced" mode, so I
tried it.  Later, I installed openvpn (2.0.9-1.el5.rf from dag) and
lzo2 (2.02-2.el5.rf) to work with it.  When I ran openvpn (as root),
I got an error message (linewraps added by me):

  Starting openvpn: /usr/sbin/openvpn: error while loading shared \
  libraries: liblzo2.so.2: cannot enable executable stack as shared \
  object requires: Permission denied

When I set /etc/selinux/config to "permissive", the error goes away,
and openvpn works fine, but that is less secure,  I assume.

Is there something simple I can do to so that selinux is happy with
this library, now and after some potential update in the future?

Keith

-- 
Keith Lofstrom          [log in to unmask]         Voice (503)-520-1993
KLIC --- Keith Lofstrom Integrated Circuits --- "Your Ideas in Silicon"
Design Contracting in Bipolar and CMOS - Analog, Digital, and Scan ICs