From: aranea@aixah.de (Luis Ressel)
Date: Sun, 27 Nov 2016 22:22:18 +0100
Subject: [refpolicy] [PATCH 2/2] system/modutils: Allow kmod to use the
 sys_admin cap
In-Reply-To: <1480278785.620.4.camel@trentalancia.net>
References: <20161127164146.3773-1-aranea@aixah.de>
	<20161127164146.3773-2-aranea@aixah.de>
	<1480278785.620.4.camel@trentalancia.net>
Message-ID: <20161127222218.1ae86825@gentp.lnet>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Sun, 27 Nov 2016 21:33:05 +0100
Guido Trentalancia via refpolicy <refpolicy@oss.tresys.com> wrote:

> Hello.
> 
> I have the same graphic card and I am not experiencing this problem
> with kernel 4.8.8...
> 
> Strange, are you using vanilla kernels ?
> 

Not exactly. I'm using Gentoo's hardened-sources kernel, which
incorporates the GRSecurity/PaX patchset and some minor distro-specific
patches. The exact kernel version I'm using is 4.8.10; on the userland
side, I'm using kmod 22.

The problem arises on both of my development systems; they're using the
i915 and the radeon driver, respectively. So it's indeed interesting
that this problem doesn't manifest itself on your system. Possible
explanations in order of descending probability:
(1) Are you using another kmod version?
(2) GRSecurity (I think grsec sometimes requires specific capabilities
    in situations where vanilla doesn't.)
(3) A difference between 4.8.8 and 4.8.10.

-- 
Regards,
Luis Ressel