This bug was fixed in the package nvidia-graphics-drivers-319 -
319.60-0ubuntu1
---------------
nvidia-graphics-drivers-319 (319.60-0ubuntu1) trusty; urgency=low
* New upstream release:
- Added support for the following GPU:
o GeForce GTX 760 Ti OEM
- Fixed a bug that could cause OpenGL applications to
crash during the initialization of new threads.
- Fixed a bug that caused the GPU and Memory clock
frequencies for some PowerMizer performance levels
on Kepler boards to be reported incorrectly in the
nvidia-settings control panel.
- Fixed a bug that caused the X server to fail to
start on certain laptops when the boot display was
on an external DisplayPort monitor, for example if
the laptop was booted while the lid was closed.
- Fixed a bug in nvidia-installer that caused the
32-bit libGL.la libtool library file to be
installed to the wrong location.
- Updated the NVIDIA OpenGL driver to write temporary
files to $TMPDIR if it is set, instead of
unconditionally writing to /tmp (LP: #1212425).
- Updated a fallback of writing temporary files to
$HOME/.nvidia to use $HOME/.nv instead, as the
latter path is already used for other NVIDIA driver
related files.
* Add buildfix_kernel_3.12.patch:
- Add support for Linux 3.12
* Refresh buildfix_kernel_3.11.patch.
-- Alberto Milone <alberto.mil...@canonical.com> Mon, 04 Nov 2013 17:10:17
+0100
** Changed in: nvidia-graphics-drivers-319 (Ubuntu)
Status: Triaged => Fix Released
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to nvidia-graphics-drivers-319-updates in
Ubuntu.
https://bugs.launchpad.net/bugs/1212425
Title:
SDK applications require /tmp access with nvidia (should honor TMPDIR)
Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
Fix Released
Status in “nvidia-graphics-drivers-319” package in Ubuntu:
Fix Released
Status in “nvidia-graphics-drivers-319-updates” package in Ubuntu:
Fix Released
Status in “apparmor-easyprof-ubuntu” source package in Saucy:
Fix Released
Status in “nvidia-graphics-drivers-319” source package in Saucy:
Triaged
Status in “nvidia-graphics-drivers-319-updates” source package in Saucy:
Fix Released
Status in “nvidia-graphics-drivers-tegra” source package in Saucy:
Invalid
Status in “nvidia-graphics-drivers-tegra3” source package in Saucy:
Invalid
Bug description:
Nvidia desktop users need the following AppArmor permissions to avoid denials:
owner /tmp/gl* mrw,
But this rule breaks application confinement such that apps are able
to tamper with each other. Interestingly, apps still run without the
rule, so we can explicitly deny it for now.
The use of /tmp is apparently hardcoded and does not honor TMPDIR
(application confinement will setup TMPDIR to a private area for the app).
strace confirms this:
24603 mkdir("/tmp", 0777) = -1 EEXIST (File exists)
24603 open("/tmp/glBRPYmm", O_RDWR|O_CREAT|O_EXCL, 0600) = -1 EACCES
(Permission denied)
While the use of O_EXCL is safe, we don't allow access to /tmp for
confined apps and libraries/applications should always honor TMPDIR.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1212425/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
