<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
On 01/08/2011 07:22 PM, Jorge Fábregas wrote:<br>
<blockquote cite="mid:4D28B97C.5040001@gmail.com" type="cite">
<pre wrap="">Hi,
Apart from the usual $HOME/.local/share/Trash mislabeled files warnings
I'm getting (same as F12) these for /dev/nvidia* on Fedora 14:
/dev/nvidia0 from system_u:object_r:device_t:s0 to
system_u:object_r:xserver_misc_device_t:s0
/dev/nvidiactl from system_u:object_r:device_t:s0 to
system_u:object_r:xserver_misc_device_t:s0
I don't know...maybe UDEV doesn't have the proper transition rules to
create xserver_misc_device_t on directoy device_t? I fix the labels but
when I restart they're created again with device_t.
</pre>
</blockquote>
<span class="Apple-style-span" style="border-collapse: separate;
color: rgb(0, 0, 0); font-family: 'Times New Roman'; font-style:
normal; font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: normal; orphans: 2; text-indent: 0px;
text-transform: none; white-space: normal; widows: 2;
word-spacing: 0px; font-size: medium;"><span
class="Apple-style-span" style="font-family: 'DejaVu
Sans','Liberation Sans',sans-serif; font-size: small;"></span></span>Probably
something broken in nvidia module that creates the device rather
then having udev create the device.
<br>
<br>
Fortunately there are some solutions for this issue.<br>
<br>
1. You could add /dev/nvidia0 to /etc/selinux/restorecond.conf and
run the<br>
restorecond service.<br>
<br>
chkconfig restorecond --add<br>
service restorecond start<br>
<br>
2. If you see in the scripts where nvidiactl is created, you could
add a<br>
restorecon right afterwards.<br>
<br>
<blockquote cite="mid:4D28B97C.5040001@gmail.com" type="cite">
<pre wrap="">
The desktop runs fine. It's just that obsession to have all files
properly labeled :)
Regards,
Jorge
--
selinux mailing list
<a class="moz-txt-link-abbreviated" href="mailto:selinux@lists.fedoraproject.org">selinux@lists.fedoraproject.org</a>
<a class="moz-txt-link-freetext" href="https://admin.fedoraproject.org/mailman/listinfo/selinux">https://admin.fedoraproject.org/mailman/listinfo/selinux</a>
</pre>
</blockquote>
<br>
</body>
</html>