Updating the nvidia driver for Fedora Core5

[Paul Howarth]

On Fri, 2006-04-14 at 09:38 -0500, Matt Domsch wrote:
> On Fri, Apr 14, 2006 at 09:44:18AM +0100, Paul Howarth wrote:
> > On Thu, 2006-04-13 at 16:50 -0600, Stephen J. Smoogen wrote:
> > > I am trying to make an internal update to the Dell dkms Nvidia package
> > > and realized that I might need to fuss with  selinux policy items. Are
> > > there special directive for doing this.. or is the recommended way to
> > > put changes in the %pre/%post items.
> > 
> > Presumably this was triggered by FC5's memory protection?
> > 
> > I think what should really happen is that the distribution's upstream
> > policy should include the correct context for the module in its final
> > destination under /lib/modules/... (Dan Walsh at Red Hat has always been
> > amenable to adding things to policy like this) and that all that should
> > be necessary for a dkms package would be something like this in dkms's
> > "install" section:
> > 
> > [ -x /sbin/restorecon ] && /sbin/restorecon /path/to/installed/module
> 
> Agreed.  Until DKMS includes this, individual modules can use a
> POST_INSTALL script to do the same, yes?

Yes, that should work - as long as the distro sets the right context
when this happens. If not, semanage might have to be used to set the
correct default context, and that could be a distribution-specific
value. That's why it's important to get the right context included in
the policy for the distro itself.

Paul.
-- 
Paul Howarth <paul at city-fan.org>