Bug#737419: xserver-xorg-video-nvidia: LXDE desktop unusable, high CPU load after SELinux activation

[Tomasz Bialas]

Package: xserver-xorg-video-nvidia
Version: 319.76-1
Severity: important

Dear Maintainer,
I installed the nvidia proprietary driver along with its dependencies and
recommended packages. I then activated SELinux in permissive mode and with
the
default policy.
When logging in to the LXDE desktop, applications such as Openbox,
LXClipboard,
LXTerminal have a very high CPU usage (40% each), leading to a 100% CPU
usage
on both cores. The mentioned applications and other GUI applications are
also
unusable, as they do not appear.
Purging all the packages and reinstalling them after SELinux activation did
not
solve the issue.
Running the "restorecon -Rv /" command did not solve the problem.
Blacklisting the nvidia module did not solve the problem.

Purging all the packages and using Nouveau instead solved the problem.

No specific messages are visible in the audit log - only AVC Denials about
systemd-logind.


Thank you for investigating this issue

###### /etc/selinux/config ##################
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - No SELinux policy is loaded.
SELINUX=permissive
# SELINUXTYPE= can take one of these two values:
# default - equivalent to the old strict and targeted policies
# mls     - Multi-Level Security (for military and educational use)
# src     - Custom policy built from source
SELINUXTYPE=default

# SETLOCALDEFS= Check local definition changes
SETLOCALDEFS=0




###### sestatus output ###################
SELinux status:                 enabled
SELinuxfs mount:                /sys/fs/selinux
SELinux root directory:         /etc/selinux
Loaded policy name:             default
Current mode:                   permissive
Mode from config file:          permissive
Policy MLS status:              enabled
Policy deny_unknown status:     allowed
Max kernel policy version:      28




-- System Information:
Debian Release: jessie/sid
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.12-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages xserver-xorg-video-nvidia depends on:
ii  debconf [debconf-2.0]                  1.5.52
ii  libc6                                  2.17-97
pn  libgl1-nvidia-glx                      <none>
pn  nvidia-alternative                     <none>
pn  nvidia-installer-cleanup               <none>
pn  nvidia-support                         <none>
ii  xserver-xorg-core [xorg-video-abi-14]  2:1.14.5-1

Versions of packages xserver-xorg-video-nvidia recommends:
pn  nvidia-driver                              <none>
pn  nvidia-kernel-dkms | nvidia-kernel-319.76  <none>
pn  nvidia-settings                            <none>
pn  nvidia-vdpau-driver                        <none>

Versions of packages xserver-xorg-video-nvidia suggests:
pn  nvidia-kernel-dkms | nvidia-kernel-source  <none>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-nvidia-devel/attachments/20140202/188b6654/attachment.html>