Allow systemd-sleep send a message to syslog over a unix dgram socket (f39)

fedora-selinux / selinux-policy

selinux-policy for Fedora is a large patch off the mainline

GNU General Public License v2.0

164 stars 163 forks source link

Allow systemd-sleep send a message to syslog over a unix dgram socket (f39) #1983

Closed zpytela closed 7 months ago

zpytela commented 9 months ago

The commit addresses the following AVC denial: type=AVC msg=audit(1702592947.333:248): avc: denied { sendto } for pid=7245 comm="systemd-sleep" path="/run/systemd/journal/socket" scontext=system_u:system_r:systemd_sleep_t:s0 tcontext=system_u:system_r:syslogd_t:s0 tclass=unix_dgram_socket permissive=0

Resolves: rhbz#2254628