• Martin Flöser's avatar
    Don't dissallow open with write flag syscall on NVIDIA · 2136a38d
    Martin Flöser authored
    Summary:
    The latest NVIDIA driver crashes the greeter due to our seccomp enabled
    sandbox being too restrictive. The driver is now opening files for
    writing after our dummy context got created and this causes a crash. In
    order to provide our users a working system again we better disable the
    seccomp rule for NVIDIA users for the time being.
    
    To detect whether an NVIDIA driver is used I copied the glplatform from
    KWin which is known to work and more reliable than writing new custom
    code even if it's a code copy. For master I'll look into splitting that
    one out from KWin and putting it into a dedicated library so that we can
    link it.
    
    This of course means that the seccomp based sandbox is now incomplete
    for NVIDIA users. An idea is to add an additional apparmor rule in
    master to enforce the write restrictions in similar way without forcing
    it for /dev.
    
    BUG: 384005
    
    Test Plan: I don't have an NVIDIA
    
    Reviewers: #plasma
    
    Subscribers: plasma-devel
    
    Tags: #plasma
    
    Differential Revision: https://phabricator.kde.org/D7616
    2136a38d
kwinglplatform.cpp 30.1 KB