Selinux and Compiz
Daniel J Walsh
dwalsh at redhat.com
Mon Oct 27 18:59:18 UTC 2008
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Chuck Forsberg WA7KGX N2469R wrote:
> After installing the Nvidia driver I tried to enable special effects
> but was thwarted by an AVC denial. I couldn't get the acceleration
> enabled until I turned off SElinux.
>
> It seems with Fedora and SElinux is it simply a matter of time
> before SElinux throws a spanner in the works at which time
> I have to get rid of it.
>
> A security tool that is incompatible with normal use to the
> extent it must be disabled offers no real security. Perhaps
> it should be an add-on for security geeks instead of a default
> annoyance.
> Chuck Forsberg caf at omen.com www.omen.com 503-614-0430
> Developer of Industrial ZMODEM(Tm) for Embedded Applications
> Omen Technology Inc "The High Reliability Software"
> 10255 NW Old Cornelius Pass Portland OR 97231 FAX 629-0665
>
I would bet your problem was with executable memory, which nvidia
libraries cause. You can turn on allow_execstack boolean to allow
executable memory, and then SELinux would stop complaining.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
iEYEARECAAYFAkkGD4YACgkQrlYvE4MpobNW/wCgzNSlru4n1EThxS4wre3+cRsS
9CoAn3TQB1XhiZyl8HJY2uBtcsBsyQz+
=uJeK
-----END PGP SIGNATURE-----
More information about the fedora-test-list
mailing list