2009/11/13 Dominik 'Rathann' Mierzejewski <dominik(a)greysector.net>:
On Thursday, 12 November 2009 at 23:37, Nicolas Chauvet wrote:
> 2009/11/10 Thorsten Leemhuis <fedora(a)leemhuis.info>:
> > Hi!
> >
> > Our rawhide trees seem to be in a mostly sane state now. Here is a list
> > of steps I'm aware of before the Everything repos for F12 can be created:
> >
> > - move the nvidia-driver to the nonfree-updates-testing repositories, as
> > requested by kwizart (#928)
> One of the task that would help to solve this problem with selinux
> will be to review nvidia-xconfig and nvidia-settings, because thoses
> will not be hitten by the selinux denials. (whereas the pre-built
> equivalent will, as rpmlint shows).
>
> For the record, the nvidia pre-built binaries have a compatibility
> mode from linux 2.4.1 (whereas fedora 11 has linux 2.6.18). It also
> means that the flag to verify that the binary doesn't requires
> execstack is off (because it doesn't exist at all). I might workaround
> it for libraries IIRC but I'm not aware of such workaround with
> binaries.
How about using execstack -c on them?
I forgot about this one, this will probably
help.
But they will need to stay in updates-testing for now. As this need
to be really tested.
If unsure prefer to use setsebool -P allow_execstack on
BTW nVidia has released support for legacy driver and xorg-server 1.7 yesterday.
/me working on it right now. (thoses will needs execstack too)
Nicolas (kwizart)