Bug 179656
| Summary: | NVIDIA proprietary X driver policy updates needed | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Ville Skyttä <scop> | ||||||||
| Component: | selinux-policy-targeted | Assignee: | Daniel Walsh <dwalsh> | ||||||||
| Status: | CLOSED RAWHIDE | QA Contact: | |||||||||
| Severity: | medium | Docs Contact: | |||||||||
| Priority: | medium | ||||||||||
| Version: | rawhide | CC: | Axel.Thimm, fedora, netllama, tim.fenn | ||||||||
| Target Milestone: | --- | ||||||||||
| Target Release: | --- | ||||||||||
| Hardware: | All | ||||||||||
| OS: | Linux | ||||||||||
| Whiteboard: | |||||||||||
| Fixed In Version: | 2.2.16-1 | Doc Type: | Bug Fix | ||||||||
| Doc Text: | Story Points: | --- | |||||||||
| Clone Of: | Environment: | ||||||||||
| Last Closed: | 2006-02-23 20:19:11 UTC | Type: | --- | ||||||||
| Regression: | --- | Mount Type: | --- | ||||||||
| Documentation: | --- | CRM: | |||||||||
| Verified Versions: | Category: | --- | |||||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||||
| Embargoed: | |||||||||||
| Attachments: |
|
||||||||||
|
Description
Ville Skyttä
2006-02-01 21:57:28 UTC
Created attachment 123997 [details]
Patch for updated location of NVIDIA libGL*
Fixed in selinux-policy-2.2.15-2 Created attachment 124821 [details]
audit.log from unsuccessful X startup
The library permissions seem to be fixed in 2.2.15-4, but the problem with
nvidia_drv.so (see initial comment) persists. audit.log snippet from
unsuccessful X/gdm startup attached.
selinux-policy-2.2.16-1 Adds the execstack priv to xserver, although it would be good to report this as a bug to nvidia. Dan Confirmed working and reported at http://www.nvnews.net/vbulletin/showthread.php?t=65363 NVIDIA has bug 207999 open for this issue. Thanks, Lonni Dan, could you also add ATrpms' paths to selinux-policy? E.g. something like -/usr/lib(64)?/xorg/modules/extensions/nvidia/libglx\.so(\.[^/]*)* -- gen_context(system_u:object_r:textrel_shlib_t,s0) +/usr/lib(64)?/xorg/modules/extensions/nvidia(-[^/]*)?/libglx\.so(\.[^/]*)* -- gen_context(system_u:object_r:textrel_shlib_t,s0) Thanks! (BTW who do I need to contact to get appropriate right to reopen bugs?) This is a sorting problem in FC5. The context is in the file, but it is being overridden by a path later in the file. I will update the policy to fix the problem. As far as who to contact, I have no idea. Dan Created attachment 127143 [details]
ATrpms nvidia file_contexts adjustments
I've attached the full list of modifications to file_contexts required for the ATrpms nvidia drivers, which includes the glx and GLcore changes. (In reply to comment #8) > This is a sorting problem in FC5. The context is in the file, but it is being > overridden by a path later in the file. I will update the policy to fix the > problem. Dan, could you also take a look at Bug #187476 please -- a lot of livna users are hitting this currently (In reply to comment #8) > I will update the policy to fix the problem. I think this got forgotten, because Tim's comment #7 was done after the bug was closed, so I'm reopening it (unless you prefer to clone the bug instead?) I received a bug report from a strict policy user (this is targeted, but I guess the fix/bug will be the same), that's how I remembered this one. Thanks! |