[opensuse] udev problem
Hey all, This is a problem I had a while back but am having again on a 10.2 install I am trying to get setup. The nvidia driver setup from their site runs fine and installs. Running openGL apps I get NVIDIA: could not open the device file /dev/nvidiactl (Permission denied) Which makes sense because my LDAP user is not part of the video group and the perms on nvidiactl look like crw-rw---- root video Changing these permission via root and restarting the application as the user makes things peachy .. until they reboot and the perms are reset to these defaults. Now it is my understanding that udev creates the device nodes on startup according to the rules set forth by the various files in /etc/ udev/rules.d In /etc/udev/rules.d/50-udev-default.rules, there is a line that looks like: KERNEL=="nvidia*|nvidiactl*, GROUP="video" Reading through the man for udev rules tells me that I *should* be able to add a line like this: KERNEL=="nvidia*|nvidiactl*, GROUP="video", MODE="0666" To give me the permissions I would like these device nodes created with upon bootup (again this is all under the assumption that udev is doing something). Furthermore I've gone ahead and turned on the debug mode for udev. After a reboot searching through /var/log/ messages brings up nothing regarding /dev/nvidia* and the permissions still remain 0660 instead of 0666. The only difference I can think of is that 10.2 installs with Novell's Apparmor by default. Whether that would interact at this level I am unsure because I haven't done a lot of reading in that direction. However I am now going to attempt a fresh install without any extraneous apps. Any help on this topic would be greatly appreciated. Cheers Todd Smith Systems Administrator --------------------------------------------- Soho VFX - Visual Effects Studio 99 Atlantic Avenue, Suite 303 Toronto, Ontario, M6K 3J8 (416) 516-7863 http://www.sohovfx.com --------------------------------------------- Systems Administrator --------------------------------------------- Soho VFX - Visual Effects Studio 99 Atlantic Avenue, Suite 303 Toronto, Ontario, M6K 3J8 (416) 516-7863 http://www.sohovfx.com --------------------------------------------- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Wed, Mar 14, 2007 at 11:39:44AM -0400, M. Todd Smith wrote:
debug mode for udev. After a reboot searching through /var/log/ messages brings up nothing regarding /dev/nvidia* and the permissions still remain 0660 instead of 0666.
The only difference I can think of is that 10.2 installs with Novell's Apparmor by default. Whether that would interact at this level I am unsure because I haven't done a lot of reading in that
AppArmor doesn't modify, enforce, or even notice, the standard unix permissions. AppArmor -can- cause applications to fail due to insufficient permissions, but that happens completely orthogonal to the standard unix discretionary access controls. When AppArmor rejects permissions, it will log the failure to /var/log/audit/audit.log (if the audit daemon is running) or /var/log/messages (if auditd isn't running, and syslog has a standard-enough-configuration). Run "aa-logprof" at an unconfined root prompt to be walked through modifying AppArmor profiles. If it quickly returns, then AppArmor isn't at fault. :) (The yast gui also has some online help, which may help to answer some questions; you may prefer it.) For the permissions changing, I can only think of /etc/permissions* -- but I don't know this system well.
M. Todd Smith wrote:
Running openGL apps I get
NVIDIA: could not open the device file /dev/nvidiactl (Permission denied)
Which makes sense because my LDAP user is not part of the video group and the perms on nvidiactl look like
crw-rw---- root video
Changing these permission via root and restarting the application as the user makes things peachy .. until they reboot and the perms are reset to these defaults. Is there a reason you do not just add that user to the video group?
-- Joe Morris Registered Linux user 231871 running openSUSE 10.2 x86_64 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Mar 15, 07 07:40:01 +0800, Joe Morris (NTM) wrote:
Changing these permission via root and restarting the application as the user makes things peachy .. until they reboot and the perms are reset to these defaults. Is there a reason you do not just add that user to the video group?
In a lot of environments you just cannot change the groups a user
belongs to due to policy reasons.
Matthias
--
Matthias Hopf
M. Todd Smith wrote:
[...] In /etc/udev/rules.d/50-udev-default.rules, there is a line that looks like:
KERNEL=="nvidia*|nvidiactl*, GROUP="video"
Reading through the man for udev rules tells me that I *should* be able to add a line like this:
KERNEL=="nvidia*|nvidiactl*, GROUP="video", MODE="0666" ^^^ quotation mark missing here
I think it should read something like: KERNEL=="nvidia*|nvidiactl*", NAME="%k", GROUP="video", MODE="666" Cheers, Th. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Mar 14, 07 11:39:44 -0400, M. Todd Smith wrote:
Which makes sense because my LDAP user is not part of the video group and the perms on nvidiactl look like
crw-rw---- root video
There's a file /etc/modprobe.d/nvidia, which normally reads options nvidia NVreg_DeviceFileUID=0 NVreg_DeviceFileGID=33 NVreg_DeviceFileMode=0660 AFAIR changing this to 0666 still works on 10.2 and factory.
To give me the permissions I would like these device nodes created with upon bootup (again this is all under the assumption that udev is doing something). Furthermore I've gone ahead and turned on the debug mode for udev. After a reboot searching through /var/log/ messages brings up nothing regarding /dev/nvidia* and the permissions still remain 0660 instead of 0666.
udev creates the device nodes only when the kernel module is loaded. The
kernel module is loaded by the driver.
It used to be the other way round (kernel module is loaded when the
device file is accessed).
HTH
Matthias
--
Matthias Hopf
MH wrote: There's a file /etc/modprobe.d/nvidia, which normally reads options nvidia NVreg_DeviceFileUID=0 NVreg_DeviceFileGID=33 NVreg_DeviceFileMode=0660
AFAIR changing this to 0666 still works on 10.2 and factory.
This works, many thanks :)
MH wrote: udev creates the device nodes only when the kernel module is loaded. The kernel module is loaded by the driver. It used to be the other way round (kernel module is loaded when the device file is accessed).
HTH
Matthias
Interesting .. looks like I have some reading to do. Cheers Todd Smtih -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (6)
-
Joe Morris (NTM) -
M. Todd Smith -
Matthias Hopf -
Seth Arnold -
Thomas Hertweck -
todd＠sohovfx.com