Go Back   nV News Forums > Linux Support Forums > NVIDIA Linux

Newegg Daily Deals

Reply
 
Thread Tools
Old 11-22-09, 10:46 PM   #1
robhancock
Registered User
 
Join Date: Dec 2004
Posts: 31
Default NVIDIA driver libraries shouldn't require execstack privileges

As shown in this thread and described on RPMFusion here, the NVIDIA driver currently requires the allow_execstack SELinux boolean to be enabled to work properly on Fedora 12. Is this going to be fixed? As the SELinux Management utility lists for this option, "This should never, ever be necessary. Probably indicates a badly coded executable."
robhancock is offline   Reply With Quote
Old 11-23-09, 02:59 PM   #2
littlebird
Registered User
 
Join Date: Nov 2009
Posts: 3
Default Re: NVIDIA driver libraries shouldn't require execstack privileges

I also would like to see a fix come about that does not require relaxing security measures. I personally have held off on installing the drivers onto my Fedora 12 box until this is in some way addressed.
littlebird is offline   Reply With Quote
Old 11-29-09, 10:21 AM   #3
robhancock
Registered User
 
Join Date: Dec 2004
Posts: 31
Default Re: NVIDIA driver libraries shouldn't require execstack privileges

It looks like the RPMFusion distribution of the drivers has fixed this problem in the version in updates-testing. Looks like they rebuilt some of the binaries from source.

Quote:
* Tue Nov 24 2009 Nicolas Chauvet <kwizart@fedoraproject.org> - 190.42-4
- Use nvidia-xconfig and nvidia-settings built from sources.

* Sat Nov 14 2009 Nicolas Chauvet <kwizart@fedoraproject.org> - 190.42-3
- Remove execstack on nvidia binaries and libraries.
robhancock is offline   Reply With Quote
Old 11-29-09, 11:44 AM   #4
mooninite
Registered User
 
Join Date: May 2006
Posts: 477
Default Re: NVIDIA driver libraries shouldn't require execstack privileges

Quote:
Originally Posted by robhan**** View Post
It looks like the RPMFusion distribution of the drivers has fixed this problem in the version in updates-testing. Looks like they rebuilt some of the binaries from source.
Those are open source programs, but it will not fix the problem. libGL.so & libGLcore.so are closed source and contain the insecure code requiring execstack.
mooninite is offline   Reply With Quote
Old 11-29-09, 12:20 PM   #5
thefirstm
Registered User
 
Join Date: Feb 2009
Posts: 226
Default Re: NVIDIA driver libraries shouldn't require execstack privileges

Quote:
Originally Posted by mooninite View Post
Those are open source programs, but it will not fix the problem. libGL.so & libGLcore.so are closed source and contain the insecure code requiring execstack.
I think the code isn't necessarily insecure, but requires the execstack privileges for performance reasons. If I remember correctly, one of the Nvidia people said that those libraries require the privileges so that they can execute code natively in order to increase OpenGL performance. So, removing the need for those privileges might cause an OpenGL performance hit for everyone.
thefirstm is offline   Reply With Quote
Old 11-29-09, 12:32 PM   #6
robhancock
Registered User
 
Join Date: Dec 2004
Posts: 31
Default Re: NVIDIA driver libraries shouldn't require execstack privileges

Quote:
Originally Posted by mooninite View Post
Those are open source programs, but it will not fix the problem. libGL.so & libGLcore.so are closed source and contain the insecure code requiring execstack.
Well, I have allow_execstack turned off with this version and 3D seems to be working fine on my system..
robhancock is offline   Reply With Quote
Old 11-29-09, 01:45 PM   #7
mooninite
Registered User
 
Join Date: May 2006
Posts: 477
Default Re: NVIDIA driver libraries shouldn't require execstack privileges

Quote:
Originally Posted by robhan**** View Post
Well, I have allow_execstack turned off with this version and 3D seems to be working fine on my system..
nvidia-settings has nothing to do with 3D rendering.

Quote:
If I remember correctly, one of the Nvidia people said that those libraries require the privileges so that they can execute code natively in order to increase OpenGL performance.
It would be nice to dig up that quote.
mooninite is offline   Reply With Quote
Old 11-29-09, 03:49 PM   #8
robhancock
Registered User
 
Join Date: Dec 2004
Posts: 31
Default Re: NVIDIA driver libraries shouldn't require execstack privileges

Quote:
Originally Posted by mooninite View Post
nvidia-settings has nothing to do with 3D rendering.
You were saying that the GL libraries require execstack, I'm saying that GL seems to be working fine with allow_execstack turned off.
robhancock is offline   Reply With Quote

Old 11-29-09, 08:37 PM   #9
Milena
Registered User
 
Join Date: Mar 2009
Posts: 36
Default Re: NVIDIA driver libraries shouldn't require execstack privileges

I installed the Nvidia .run driver on Fedora 12 just like I did on F10+11 before, never used the RPMFusion one and there is no need at all for the allow_execstack boolean, everything works as intended.
Milena is offline   Reply With Quote
Old 11-30-09, 08:09 PM   #10
xorbe
Unbuffered User
 
Join Date: Jun 2005
Posts: 388
Default Re: NVIDIA driver libraries shouldn't require execstack privileges

I remember reading somewhere that the driver uses self modifying code for speed.
xorbe is offline   Reply With Quote
Reply


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -5. The time now is 03:48 AM.


Powered by vBulletin® Version 3.7.1
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Copyright 1998 - 2014, nV News.