Notice: Latest update killed sddm for nVidia driver users

classic Classic list List threaded Threaded
5 messages Options
Reply | Threaded
Open this post in threaded view
|

Notice: Latest update killed sddm for nVidia driver users

Ed Greshko
This is just a notice to others who may run into this....

I just updated a system where I use the nVidia drivers from rpmfusion.  After the
update I could not get a login screen.  Just a mouse cursor on a black background.  I
found there to be an selinux AVC.

type=AVC msg=audit(1527130068.596:164): avc:  denied  { map } for  pid=1205
comm="sddm-greeter" path="/dev/nvidiactl" dev="devtmpfs" ino=17300
scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023
tcontext=system_u:object_r:xserver_misc_device_t:s0 tclass=chr_file permissive=0

Ran...

ausearch -c 'sddm-greeter' --raw | audit2allow -M my-sddmgreeter
semodule -X 300 -i my-sddmgreeter.pp

to fix the problem.

The transaction of the update was for the following.

    Upgraded gstreamer1-1.14.0-1.fc28.x86_64
    Upgrade             1.14.1-1.fc28.x86_64
    Upgraded ibus-table-1.9.18-2.fc28.noarch
    Upgrade             1.9.20-1.fc28.noarch
    Upgraded ibus-table-devel-1.9.18-2.fc28.noarch
    Upgrade                   1.9.20-1.fc28.noarch
    Erase    kernel-4.16.7-300.fc28.x86_64      
    Install  kernel-4.16.10-300.fc28.x86_64    
    Erase    kernel-core-4.16.7-300.fc28.x86_64
    Install  kernel-core-4.16.10-300.fc28.x86_64
    Erase    kernel-devel-4.16.7-300.fc28.x86_64
    Install  kernel-devel-4.16.10-300.fc28.x86_64
    Upgraded kernel-headers-4.16.9-300.fc28.x86_64
    Upgrade                 4.16.10-300.fc28.x86_64
    Erase    kernel-modules-4.16.7-300.fc28.x86_64
    Install  kernel-modules-4.16.10-300.fc28.x86_64
    Erase    kernel-modules-extra-4.16.7-300.fc28.x86_64
    Install  kernel-modules-extra-4.16.10-300.fc28.x86_64
    Erase    kmod-nvidia-4.16.7-300.fc28.x86_64-3:390.48-1.fc28.x86_64
    Upgraded libepoxy-1.5.1-1.fc28.x86_64                           
    Upgrade           1.5.2-1.fc28.x86_64                          
    Upgraded libgnomekbd-3.26.0-4.fc28.x86_64                     
    Upgrade              3.26.0-5.fc28.x86_64                    
    Upgraded libidn2-2.0.4-7.fc28.x86_64                        
    Upgrade          2.0.5-1.fc28.x86_64                       
    Upgraded libipa_hbac-1.16.1-4.fc28.x86_64                 
    Upgrade              1.16.1-8.fc28.x86_64                
    Upgraded libkworkspace5-5.12.5-1.fc28.x86_64            
    Upgrade                 5.12.5-3.fc28.x86_64           
    Upgraded libsss_autofs-1.16.1-4.fc28.x86_64           
    Upgrade                1.16.1-8.fc28.x86_64          
    Upgraded libsss_certmap-1.16.1-4.fc28.x86_64        
    Upgrade                 1.16.1-8.fc28.x86_64       
    Upgraded libsss_idmap-1.16.1-4.fc28.x86_64        
    Upgrade               1.16.1-8.fc28.x86_64       
    Upgraded libsss_nss_idmap-1.16.1-4.fc28.x86_64  
    Upgrade                   1.16.1-8.fc28.x86_64                  
    Upgraded libsss_simpleifp-1.16.1-4.fc28.x86_64                 
    Upgrade                   1.16.1-8.fc28.x86_64                
    Upgraded libsss_sudo-1.16.1-4.fc28.x86_64                    
    Upgrade              1.16.1-8.fc28.x86_64                   
    Upgraded libwacom-0.28-3.fc28.x86_64                       
    Upgrade           0.30-1.fc28.x86_64                      
    Upgraded libwacom-data-0.28-3.fc28.noarch                
    Upgrade                0.30-1.fc28.noarch               
    Upgraded nodejs-1:8.11.0-1.fc28.x86_64                 
    Upgrade         1:8.11.2-1.fc28.x86_64                
    Upgraded npm-1:5.6.0-1.8.11.0.1.fc28.x86_64          
    Upgrade      1:5.6.0-1.8.11.2.1.fc28.x86_64         
    Upgraded pam-1.3.0-10.fc28.x86_64                  
    Upgrade      1.3.1-1.fc28.x86_64                  
    Upgraded plasma-discover-5.12.5-1.fc28.x86_64    
    Upgrade                  5.12.5-2.fc28.x86_64   
    Upgraded plasma-discover-flatpak-5.12.5-1.fc28.x86_64         
    Upgrade                          5.12.5-2.fc28.x86_64        
    Upgraded plasma-discover-libs-5.12.5-1.fc28.x86_64          
    Upgrade                       5.12.5-2.fc28.x86_64         
    Upgraded plasma-lookandfeel-fedora-5.12.5-1.fc28.noarch   
    Upgrade                            5.12.5-3.fc28.noarch  
    Upgraded plasma-workspace-5.12.5-1.fc28.x86_64          
    Upgrade                   5.12.5-3.fc28.x86_64         
    Upgraded plasma-workspace-common-5.12.5-1.fc28.x86_64 
    Upgrade                          5.12.5-3.fc28.x86_64
    Upgraded plasma-workspace-geolocation-5.12.5-1.fc28.x86_64 
    Upgrade                               5.12.5-3.fc28.x86_64
    Upgraded plasma-workspace-geolocation-libs-5.12.5-1.fc28.x86_64 
    Upgrade                                    5.12.5-3.fc28.x86_64
    Upgraded plasma-workspace-libs-5.12.5-1.fc28.x86_64           
    Upgrade                        5.12.5-3.fc28.x86_64          
    Upgraded plasma-workspace-wayland-5.12.5-1.fc28.x86_64      
    Upgrade                           5.12.5-3.fc28.x86_64     
    Upgraded python3-sss-1.16.1-4.fc28.x86_64                 
    Upgrade              1.16.1-8.fc28.x86_64                
    Upgraded python3-sssdconfig-1.16.1-4.fc28.noarch        
    Upgrade                     1.16.1-8.fc28.noarch       
    Upgraded qt-1:4.8.7-36.fc28.x86_64                    
    Upgrade     1:4.8.7-40.fc28.x86_64                   
    Upgraded qt-common-1:4.8.7-36.fc28.noarch           
    Upgrade            1:4.8.7-40.fc28.noarch         
    Upgraded qt-x11-1:4.8.7-36.fc28.x86_64           
    Upgrade         1:4.8.7-40.fc28.x86_64          
    Upgraded sddm-breeze-5.12.5-1.fc28.noarch                    
    Upgrade              5.12.5-3.fc28.noarch                   
    Upgraded selinux-policy-3.14.1-24.fc28.noarch              
    Upgrade                 3.14.1-25.fc28.noarch             
    Upgraded selinux-policy-targeted-3.14.1-24.fc28.noarch   
    Upgrade                          3.14.1-25.fc28.noarch       
    Upgraded sssd-1.16.1-4.fc28.x86_64                          
    Upgrade       1.16.1-8.fc28.x86_64                         
    Upgraded sssd-ad-1.16.1-4.fc28.x86_64                     
    Upgrade          1.16.1-8.fc28.x86_64                    
    Upgraded sssd-client-1.16.1-4.fc28.x86_64               
    Upgrade              1.16.1-8.fc28.x86_64              
    Upgraded sssd-common-1.16.1-4.fc28.x86_64             
    Upgrade              1.16.1-8.fc28.x86_64            
    Upgraded sssd-common-pac-1.16.1-4.fc28.x86_64       
    Upgrade                  1.16.1-8.fc28.x86_64      
    Upgraded sssd-dbus-1.16.1-4.fc28.x86_64           
    Upgrade            1.16.1-8.fc28.x86_64          
    Upgraded sssd-ipa-1.16.1-4.fc28.x86_64          
    Upgrade           1.16.1-8.fc28.x86_64         
    Upgraded sssd-kcm-1.16.1-4.fc28.x86_64        
    Upgrade           1.16.1-8.fc28.x86_64                
    Upgraded sssd-krb5-1.16.1-4.fc28.x86_64              
    Upgrade            1.16.1-8.fc28.x86_64             
    Upgraded sssd-krb5-common-1.16.1-4.fc28.x86_64     
    Upgrade                   1.16.1-8.fc28.x86_64    
    Upgraded sssd-ldap-1.16.1-4.fc28.x86_64          
    Upgrade            1.16.1-8.fc28.x86_64         
    Upgraded sssd-nfs-idmap-1.16.1-4.fc28.x86_64   
    Upgrade                 1.16.1-8.fc28.x86_64  
    Upgraded sssd-proxy-1.16.1-4.fc28.x86_64     
    Upgrade             1.16.1-8.fc28.x86_64    
    Upgraded sssd-tools-1.16.1-4.fc28.x86_64          
    Upgrade             1.16.1-8.fc28.x86_64         
    Upgraded volume_key-libs-0.3.9-19.fc28.x86_64   
    Upgrade                  0.3.10-1.fc28.x86_64  
    Upgraded vte-profile-0.52.1-1.fc28.x86_64     
    Upgrade              0.52.2-1.fc28.x86_64    
    Upgraded vte291-0.52.1-1.fc28.x86_64



_______________________________________________
users mailing list -- [hidden email]
To unsubscribe send an email to [hidden email]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@.../message/CXJXS3WBD37UNB26PW22VNZIZMFGAOT3/

signature.asc (235 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: Notice: Latest update killed sddm for nVidia driver users

Ed Greshko-2
On 05/24/18 11:26, Ed Greshko wrote:

> This is just a notice to others who may run into this....
>
> I just updated a system where I use the nVidia drivers from rpmfusion.  After the
> update I could not get a login screen.  Just a mouse cursor on a black background.  I
> found there to be an selinux AVC.
>
> type=AVC msg=audit(1527130068.596:164): avc:  denied  { map } for  pid=1205
> comm="sddm-greeter" path="/dev/nvidiactl" dev="devtmpfs" ino=17300
> scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023
> tcontext=system_u:object_r:xserver_misc_device_t:s0 tclass=chr_file permissive=0
>
> Ran...
>
> ausearch -c 'sddm-greeter' --raw | audit2allow -M my-sddmgreeter
> semodule -X 300 -i my-sddmgreeter.pp
>
> to fix the problem.
>
> The transaction of the update was for the following.
FYI, I verified that it was the selinux packages being updated that causes the issue.


--
Conjecture is just a conclusion based on incomplete information. It isn't a fact.


_______________________________________________
users mailing list -- [hidden email]
To unsubscribe send an email to [hidden email]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@.../message/B5KBA6XJDNQR6BSK6SE5RW6K7L346HRB/

signature.asc (849 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: Notice: Latest update killed sddm for nVidia driver users

Todd Zullinger
Ed Greshko wrote:

> On 05/24/18 11:26, Ed Greshko wrote:
>> This is just a notice to others who may run into this....
>>
>> I just updated a system where I use the nVidia drivers from rpmfusion.  After the
>> update I could not get a login screen.  Just a mouse cursor on a black background.  I
>> found there to be an selinux AVC.
>>
>> type=AVC msg=audit(1527130068.596:164): avc:  denied  { map } for  pid=1205
>> comm="sddm-greeter" path="/dev/nvidiactl" dev="devtmpfs" ino=17300
>> scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023
>> tcontext=system_u:object_r:xserver_misc_device_t:s0 tclass=chr_file permissive=0
>>
>> Ran...
>>
>> ausearch -c 'sddm-greeter' --raw | audit2allow -M my-sddmgreeter
>> semodule -X 300 -i my-sddmgreeter.pp
>>
>> to fix the problem.
>>
>> The transaction of the update was for the following.
>
> FYI, I verified that it was the selinux packages being updated that causes the issue.
This was just filed, for anyone affected:

    https://bugzilla.redhat.com/show_bug.cgi?id=1582203

--
Todd
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Whatever it is that the government does, sensible Americans would
prefer that the government does it to somebody else. This is the idea
behind foreign policy.
    -- P.J. O'Rourke


_______________________________________________
users mailing list -- [hidden email]
To unsubscribe send an email to [hidden email]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@.../message/5UEZVAPDSXR47VP5L7FLLGCUEL54SO43/

signature.asc (555 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: Notice: Latest update killed sddm for nVidia driver users

Ed Greshko
On 05/24/18 22:12, Todd Zullinger wrote:
> This was just filed, for anyone affected:
>
>     https://bugzilla.redhat.com/show_bug.cgi?id=1582203


Fixed with selinux-policy-3.14.1-29, currently in koji

--
Conjecture is just a conclusion based on incomplete information. It isn't a fact.


_______________________________________________
users mailing list -- [hidden email]
To unsubscribe send an email to [hidden email]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@.../message/2RD3SKP4SK5UFDQCMXEFCT2KQMUA64LB/

signature.asc (235 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: Notice: Latest update killed sddm for nVidia driver users

Lukas Vrabec
On 05/24/2018 05:24 PM, Ed Greshko wrote:
> On 05/24/18 22:12, Todd Zullinger wrote:
>> This was just filed, for anyone affected:
>>
>>     https://bugzilla.redhat.com/show_bug.cgi?id=1582203
>
>
> Fixed with selinux-policy-3.14.1-29, currently in koji
>

Here is the link to bodhi:
https://bodhi.fedoraproject.org/updates/FEDORA-2018-a74875b364

>
>
> _______________________________________________
> users mailing list -- [hidden email]
> To unsubscribe send an email to [hidden email]
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/users@.../message/2RD3SKP4SK5UFDQCMXEFCT2KQMUA64LB/
>


--
Lukas Vrabec
Software Engineer, Security Technologies
Red Hat, Inc.


_______________________________________________
users mailing list -- [hidden email]
To unsubscribe send an email to [hidden email]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@.../message/DH4WPLXHBIVIHH4E7SXO4AX4FVBIHLPI/

signature.asc (499 bytes) Download Attachment