Arch + NVIDIA + grsecurity

[Utini]

Hey there,

I am running Archlinux with an Intel GPU + NVIDIA GPU (bumblebee setup) and installed linux-grsec. The Archwiki says that for some nvidia modules a patched linux-grsec-nvidia might be need (which comes from the AUR but I would like to stay with a grsec kernel vom the official repo's). Is there a way to get NVIDIA running with linux-grsec as it is? E.g. by creating exceptions for NVIDIA?

E.g. I get the following errors:

Code: Select all

sneida@_____:~$ primusrun screenfetch
[[ ! ]] modprobe: FATAL: Module nvidia not found in directory /lib/modules/4.3.3.201601192226-1-grsec
                   -`
                  .o+`                 sneida@_____
                 `ooo/                 OS: Arch Linux
                `+oooo:                Kernel: x86_64 Linux 4.3.3.201601192226-1-grsec
               `+oooooo:               Uptime: 14m
               -+oooooo+:              Packages: 883
             `/:-:++oooo+:             Shell: bash 4.3.42
            `/++++/+++++++:            Resolution: 3200x1800
           `/++++++++++++++:           DE: Gnome
          `/+++ooooooooooooo/`         WM: GNOME Shell
         ./ooosssso++osssssso+`        WM Theme: Adwaita
        .oossssso-````/ossssss+`       GTK Theme: Numix [GTK2/3]
       -osssssso.      :ssssssso.      Icon Theme: Numix-Circle
      :osssssss/        osssso+++.     Font: Cantarell 11
     /ossssssss/        +ssssooo/-     CPU: Intel Core i7-4702HQ CPU @ 3.2GHz
   `/ossssso+/:-        -:/+osssso+-   RAM: 1190MiB / 15952MiB
  `+sso+:-`                 `.-/+oso:
 `++:.                           `-/+/
 .`                                 `/
sneida@_____:~$ optirun screenfetch
[  879.366993] [ERROR]Cannot access secondary GPU - error: [XORG] (EE) /dev/dri/card0: failed to set DRM interface version 1.4: Permission denied

[  879.367050] [ERROR]Aborting because fallback start is disabled.


Thanks !

[strcat]

You don't have the proprietary drivers installed for the kernel you're using, so you're not at the point where there's any incompatibility. It's just not installed. The nvidia-grsec AUR package is the proprietary driver for the linux-grsec kernel with the necessary patches to the shim to make it work. It doesn't replace the kernel package. It does mean you would be running millions of lines of unauditable, unhardened code from NVIDIA (it's essentially as big as the kernel + other modules for a given set of hardware).