selinux with nvidia0

[Kiwon Um]

Hello!

During quite a long time, a SELinux problem with the manually installed nvidia driver has been presented. I've installed the latest nvidia driver manually, not that of the yum package. It certainly works fine.

But my SELinux troubleshooter is showing me a problematic massage.
Although I've done "restorecon -v /dev/nvidia0", it does not work.
I append my SELinux troubleshooter's message except my private information.
Comment for me please.

Bye.
P.s. I don't want to change my SELinux policy, please DO NOT say "turn off your SELinux ".

Summary
SELinux is preventing /sbin/ldconfig (ldconfig_t) "read write" to
/dev/nvidia0 (dri_device_t).

Detailed Description
SELinux denied access requested by /sbin/ldconfig. It is not expected that
this access is required by /sbin/ldconfig and this access may signal an
intrusion attempt. It is also possible that the specific version or
configuration of the application is causing it to require additional access.

Allowing Access
Sometimes labeling problems can cause SELinux denials. You could try to
restore the default system file context for /dev/nvidia0, restorecon -v
/dev/nvidia0 If this does not work, there is currently no automatic way to
allow this access. Instead, you can generate a local policy module to allow
this access - see http://fedora.redhat.com/docs/selinu...fc5/#id2961385
Or you can disable SELinux protection altogether. Disabling SELinux
protection is not recommended. Please file a
http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.

Additional Information

Source Context user_u:system_r:ldconfig_t
Target Context system_u:object_r:dri_device_t
Target Objects /dev/nvidia0 [ chr_file ]
Affected RPM Packages glibc-2.6-4 [application]
Policy RPM selinux-policy-2.6.4-49.fc7
Selinux Enabled True
Policy Type targeted
MLS Enabled True
Enforcing Mode Enforcing
Plugin Name plugins.catchall_file
Host Name .............................
Platform Linux ......................... 2.6.23.1-10.fc7 #1
SMP Fri Oct 19 15:39:08 EDT 2007 i686 i686
Alert Count 1
First Seen Tue 06 Nov 2007 03:13:34 PM KST
Last Seen Tue 06 Nov 2007 03:13:34 PM KST
Local ID ................................
Line Numbers

Raw Audit Messages

avc: denied { read, write } for comm="ldconfig" dev=tmpfs egid=0 euid=0
exe="/sbin/ldconfig" exit=0 fsgid=0 fsuid=0 gid=0 items=0 path="/dev/nvidia0"
pid=8172 scontext=user_u:system_r:ldconfig_t:s0 sgid=0
subj=user_u:system_r:ldconfig_t:s0 suid=0 tclass=chr_file
tcontext=system_u:object_r:dri_device_t:s0 tty=pts2 uid=0