On 7:55am Dec 22, 2004, Marc Schwartz wrote
> Hi all,
>
> This may be a red-herring, but after the most recent SELinux updates,
> which I did yesterday, I am getting all kinds of avc errors related to
> the nVidia driver. A sampling of the errors from dmesg are below:
>
> audit(1103691048.561:0): avc: denied { read } for pid=14751
> exe=/sbin/ldconfig name=libXvMCNVIDIA.so.1.0.6629 dev=hdc6 ino=1348430
> scontext=root:system_r:ldconfig_t tcontext=root:object_r:lib_t
> tclass=file
> audit(1103691048.608:0): avc: denied { read } for pid=14751
> exe=/sbin/ldconfig name=libnvidia-tls.so.1.0.6629 dev=hdc6 ino=1347918
> scontext=root:system_r:ldconfig_t tcontext=root:object_r:lib_t
> tclass=file
> audit(1103691048.687:0): avc: denied { read } for pid=14751
> exe=/sbin/ldconfig name=libGL.so.1.0.6629 dev=hdc6 ino=1347810
> scontext=root:system_r:ldconfig_t tcontext=root:object_r:lib_t
> tclass=file
> audit(1103691048.715:0): avc: denied { read } for pid=14751
> exe=/sbin/ldconfig name=libGLcore.so.1.0.6629 dev=hdc6 ino=1347874
> scontext=root:system_r:ldconfig_t tcontext=root:object_r:lib_t
> tclass=file
> audit(1103691048.792:0): avc: denied { read } for pid=14751
> exe=/sbin/ldconfig name=libnvidia-tls.so.1.0.6629 dev=hdc6 ino=1348402
> scontext=root:system_r:ldconfig_t tcontext=root:object_r:lib_t
> tclass=file
>
>
> I first noted the problem when trying to use mplayer and got the
> following:
>
> mplayer: error while loading shared libraries: libGL.so.1: cannot open
> shared object file: No such file or directory
>
>
> I dropped to init level 3 to try to rebuild the nVidia driver, thinking
> that something was wrong with the driver, but got all kinds of errors
> during the build about not being able to locate certain files and that
> certain symlinks were not found. These errors have never been seen
> before.
>
> Is there a problem with the security policy updates in the new packages
> or am I missing something else?
>
> Thanks,
>
> Marc Schwartz
>
>
>
i got exactly the same problems (actually i got them while
installing packages, i don't let up2date install
packages... do so manually). there were a whole bunch of
/sbin/ldconfig errors not all limited to nvidia... some were
libasound, other libboost etc. and after a reboot i couldn't
login b/c libasound.so.2 was not found etc.
with selinux disabled everything worked. with selinux
enforcing, the errors multiplied.
so i ran
/sbin/fixfiles relabel
(on the entire file system) after booting into single user
mode. i wiped off the /tmp as well (don't think it is
necessary) as part of fixfiles
then ran /sbin/ldconfig
this seems to have fixed the problem.
