search

fedora-selinux / selinux-policy-contrib

Fedora Policy Contributions
39 stars 66 forks source link

Allow irqbalance file transition for pid sock_files and directories #286

Closed zpytela closed 4 years ago

zpytela commented 4 years ago

Allow irqbalance file transition to its private type in runtime directory also for sock_file and directory class.

Resolves: rhbz#1852486

wrabcak commented 4 years ago

You're allowing to make transition for dirs and sock_files but process irqbalance_t cannot manage them. Is it expected?

zpytela commented 4 years ago

It is expected irqbalance be able to manage them, fixed.

wrabcak commented 4 years ago

What about dirs?

zpytela commented 4 years ago

manage_files_pattern already contains rw_dir_perms for the directory class, but I see now it may not be enough.

wrabcak commented 4 years ago

AFAIK, rw_dir_perms is not enough to create new dir.

LGTM

wrabcak commented 4 years ago

btw. make sure that also irqbalance.fc is updated