Install Ioncube Loader while SELinux Enabled

When you install free ioncube loader under CentOS 5.x, which has SELinux enabled by default, you will see following error message:
“cannot restore segment prot after reloc: Permission denied”
You have a few options here.
You can disable SELinux, edit /etc/selinux/config, look for” SELINUX=”, put “disabled” to the right of “=”, it reads like this “SELINUX=disabled”, when you restart the machine, SELinux will be totally disabled. But when you want to enable SELinux lately, the system will relabel all the files at the boot time, it will take very long time to finish the relabeling process, so disable SELinux is not recommended.
Then you can put “permissive” in place of “disabled”, or run “setenforce 0” on command line(“setenforce 1” re-enable it),  you will see warning messages but SELinux won’t do anything to stop unauthorized access. If you are serious about security, probably you won’t feel comfortable when SELinux is not enforcing it’s rules.
Now you’re ready for the real solution.
When you see the error messages when you restart your HTTP server, run following command(step 1):
audit2allow -l -a -r
You should see the required types and classes being displayed and the permissions you need to load into selinux module, you’re not going to see them all at once, you will have to try a few times(load the  first set of rules if there are still problems, start from step 1 again ) to get all the required types, classes and permissions. Following I will show you how make it work, step by step:
You need to create an file “local.te”, which will hold all the required types, classes and permissions to be loaded in to SELinux module, in our case, you need to add following into local.te:
module local 1.0;
require {
class process {execstack execmem execheap};

class file { ioctl lock append create getattr setattr link relabelfrom unlink write read rename execmod };
type unconfined_t;
type httpd_t;
type httpd_sys_content_t;
};
allow unconfined_t httpd_sys_content_t:file execmod;
allow httpd_t self:process {execstack execmem execheap};
End of code.
When you have the local.te ready, run following command:
checkmodule -M -m -o local.mod local.te
semodule_package -o local.pp -m local.mod
semodule -i local.pp
Now you HTTP server will load ioncube loader without any trouble