Allow init create and use netlink netfilter socket

fedora-selinux / selinux-policy

selinux-policy for Fedora is a large patch off the mainline

GNU General Public License v2.0

168 stars 168 forks source link

Allow init create and use netlink netfilter socket #1981

Closed zpytela closed 10 months ago

zpytela commented 10 months ago

The commit addresses the following AVC denial: type=AVC msg=audit(12/08/2023 06:07:03.373:259) : avc: denied { create } for pid=1 comm=systemd scontext=system_u:system_r:init_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=netlink_netfilter_socket permissive=1

Resolves: rhbz#2250935