Nvidia Security Issue

phildg · 2007-08-22 17:51:32

Hi,

I've just read about insecure file permissions for /dev/nvidia* with gentoo (http://secunia.com/advisories/26497/). So I thought I'd have a quick glance at /dev on my system for the sake of curiosity:

$ ls -l /dev/nvidia*
crw-rw-rw- 1 root root  195,   0 2007-08-19 16:50 /dev/nvidia0
crw-rw-rw- 1 root root  195, 255 2007-08-19 16:50 /dev/nvidiactl

I'd say archlinux has the same problem. After a bit of searching I found a workaround in the gentoo forums, which was to add the following lines to /etc/modprobe.conf:

options nvidia NVreg_DeviceFileUID=0
options nvidia NVreg_DeviceFileGID=91
options nvidia NVreg_DeviceFileMode=0660

After removing and modprobing nvidia and restarting X the permissions are looking much more sane:

$ ls -l /dev/nvidia*
crw-rw---- 1 root video 195,   0 2007-08-19 16:50 /dev/nvidia0
crw-rw---- 1 root video 195, 255 2007-08-19 16:50 /dev/nvidiactl

Anyway, I'm not really sure what to do next, I've solved the problem for myself and brought it to the attention of the forum.

Cerebral · 2007-08-22 18:00:34

phildg wrote:

Anyway, I'm not really sure what to do next, I've solved the problem for myself and brought it to the attention of the forum.

Register on the Bugtracker and post a bug report there. It's far more likely to get fixed in our packages with a bug report open.

phildg · 2007-08-22 18:22:11

Thanks.

Done.

Cerebral · 2007-08-22 18:36:47

Good stuff - thanks for filling it out. In case anyone's looking for the report, it's at http://bugs.archlinux.org/task/7876

[vEX] · 2007-08-22 20:28:52

/me edits his /etc/modprobe.conf

Thanks for posting at the forums too.

Arch Linux

#1 2007-08-22 17:51:32

Nvidia Security Issue

#2 2007-08-22 18:00:34

Re: Nvidia Security Issue

#3 2007-08-22 18:22:11

Re: Nvidia Security Issue

#4 2007-08-22 18:36:47

Re: Nvidia Security Issue

#5 2007-08-22 20:28:52

Re: Nvidia Security Issue

Board footer