Le mercredi 29 mars 2006 à 13:12 -0800, Florin Andrei a écrit :
> On Wed, 2006-03-29 at 22:57 +0200, Gérard Milmeister wrote:
> > On Wed, 2006-03-29 at 22:50 +0200, Eric Tanguy wrote:
> > > I just installed the new 2.6.16 kernel and
> > > xorg-x11-drv-nvidia-1.0.8178-7.lvn5
> > > kmod-nvidia-1.0.8178-6.2.6.16_1.2080_FC5
> > > all seems to work fine except if i try to run glxgears :
> > > Xlib: extension "GLX" missing on display ":0.0".
> > > Error: couldn't get an RGB, Double-buffered visual
> >
> > It works if you disable selinux.
>
> Disabling SELinux altogether is pretty extreme and should not be done in
> most cases anyway.
>
> What's the particular SELinux bit that blocks it? audit.log should
> provide a clue.
>
> --
> Florin Andrei
Here is what i found in audit.log concerning this problem :
type=AVC msg=audit(1143664723.328:19): avc: denied { execmod } for
pid=2334 comm="Xorg" name="libglx.so.1.0.8178" dev=dm-0 ino=7504090
scontext=system_u:system_r:xdm_t:s0-s0:c0.c255
tcontext=system_u:object_r:lib_t:s0 tclass=file
type=SYSCALL msg=audit(1143664723.328:19): arch=40000003 syscall=125
success=no exit=-13 a0=164000 a1=7c000 a2=5 a3=bf983950 items=0 pid=2334
auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0
comm="Xorg" exe="/usr/bin/Xorg"
type=AVC_PATH msg=audit(1143664723.328:19):
path="/usr/lib/xorg/modules/extensions/nvidia/libglx.so.1.0.8178"
Eric
