Selinux and Compiz

Daniel J Walsh dwalsh at redhat.com
Mon Oct 27 18:59:18 UTC 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Chuck Forsberg WA7KGX N2469R wrote:
> After installing the Nvidia driver I tried to enable special effects
> but was thwarted by an AVC denial.  I couldn't get the acceleration
> enabled until I turned off SElinux.
> 
> It seems with Fedora and SElinux is it simply a matter of time
> before SElinux throws a spanner in the works at which time
> I have to get rid of it.
> 
> A security tool that is incompatible with normal use to the
> extent it must be disabled offers no real security.  Perhaps
> it should be an add-on for security geeks instead of a default
> annoyance.    
> Chuck Forsberg    caf at omen.com   www.omen.com   503-614-0430
> Developer of Industrial ZMODEM(Tm) for Embedded Applications
>  Omen Technology Inc      "The High Reliability Software"
> 10255 NW Old Cornelius Pass Portland OR 97231   FAX 629-0665
> 
I would bet your problem was with executable memory, which nvidia
libraries cause.  You can turn on allow_execstack boolean to allow
executable memory, and then SELinux would stop complaining.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkkGD4YACgkQrlYvE4MpobNW/wCgzNSlru4n1EThxS4wre3+cRsS
9CoAn3TQB1XhiZyl8HJY2uBtcsBsyQz+
=uJeK
-----END PGP SIGNATURE-----




More information about the fedora-test-list mailing list