fedora-selinux / selinux-policy

selinux-policy for Fedora is a large patch off the mainline
GNU General Public License v2.0
164 stars 163 forks source link

Allow thumb_t append to init unix domain stream sockets #1965

Closed zpytela closed 9 months ago

zpytela commented 9 months ago

The commit addresses the following AVC denial: type=AVC msg=audit(1701466420.881:575): avc: denied { append } for pid=22070 comm="gdk-pixbuf-thum" path="socket:[25140]" dev="sockfs" ino=25140 scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=0

Resolves: rhbz#2252637