search

fedora-selinux / selinux-policy

selinux-policy for Fedora is a large patch off the mainline
GNU General Public License v2.0
164 stars 163 forks source link

Allow spamd_update_t the sys_ptrace capability in user namespace #1984

Closed zpytela closed 8 months ago

zpytela commented 9 months ago

The commit addresses the following AVC denial: type=AVC msg=audit(1702854015.017:42859): avc: denied { sys_ptrace } for pid=1077477 comm="pgrep" capability=19 scontext=system_u:system_r:spamd_update_t:s0 tcontext=system_u:system_r:spamd_update_t:s0 tclass=cap_userns permissive=1

Resolves: rhbz#2252484