[ATrpms-users] Question about SELinux and nvidia packaging

[Tim Fenn]

On Sun, 27 Apr 2008 02:31:20 -0400 Harry Orenstein
<holists at verizon.net> wrote:

> 
> I infrequently get the following error on boot when mythbackend
> starts up:
> 
> /usr/bin/mythbackend: error while loading shared 
> libraries: /usr/lib/nvidia-graphics-169.12/libGLcore.so.1: cannot
> restore segment prot after reloc: Permission denied
> 
> Now, I'm not sure why mythbackend has to use the nvidia libs since it
> doesn't generate any output, but that doesn't seem to be a question
> to ask here.  I did some googling, and the best I can tell is that
> this happens when the context of the indicated lib is not set
> correctly.
> 
> The file is a symlink to libGLcore.so.169.12.  The symlink has a
> context different than the context set by the policy file for other
> nvidia files (textrel_shlib_t) because symlinks are not set in the
> policy.  I assume they're not expected because symlinks would not be
> set up by a standard installation of the nvidia drivers.
> 

This is something for the selinux-policy - it should have been fixed
ages ago:

https://bugzilla.redhat.com/show_bug.cgi?id=179656

you may want to bring it up in fedora-selinux - does a simple
restorecon fix it?  Is selinux-policy up to date?

-Tim

-- 
CAPS LOCK IS THE CRUISE CONTROL OF AWESOMNESS