PFJ wrote:
Hi,
I'm entering
setsebool -P allow_execmod=1
Try /usr/sbin/setsebool -P allow_execmod=1
but bash says the command is not found. Same with "init 3" for
bringing FC5 down to the command line so i can enable the drivers.
Right, it sounds like you're using the drivers from the nVidia website.
Don't. Use the ones from rpm.livna.org - these are especially wrapped up
to just install like a normal RPM. All you need do once the rpm is
installed is restart the X server (ctrl-delete) - warning, this will log
out when you do it.
Just a heads up. If you do want to use the nVidia installer with SELinux
enabled, the instructions on the FedoraFaq web site need to be updated.
Undo the changes to the booleans:
# /usr/sbin/setsebool -P allow_execstack 0
# /usr/sbin/setsebool -P allow_execmod 0
Then update the file contexts instead:
# /usr/sbin/semanage fcontext -a -f -- -t textrel_shlib_t
'/usr/lib/libGL(core)?\.so(\.[^/]*)*'
# /usr/sbin/semanage fcontext -a -f -- -t textrel_shlib_t
'/usr/lib/libnvidia.*\.so(\.[^/]*)*'
# /sbin/restorecon -v /usr/lib/libGL* /usr/lib/libnvidia*
In case of line wrapping, each of the three commands above should be on
a single line.
The above is based upon a discussion with Paul Howarth on the SELinux list.
HTH,
Marc Schwartz
