fedora-selinux / selinux-policy

selinux-policy for Fedora is a large patch off the mainline
GNU General Public License v2.0
168 stars 168 forks source link

Allow bluetooth devices work with alsa #1986

Closed zpytela closed 10 months ago

zpytela commented 10 months ago

The commit addresses the following AVC denials: type=AVC msg=audit(1702496797.273:128): avc: denied { search } for pid=1387 comm="bluetoothd" name="alsa" dev="nvme1n1p2" ino=141177 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:alsa_var_lib_t:s0 tclass=dir permissive=1 type=SYSCALL msg=audit(1702496797.273:128): arch=x86_64 syscall=access success=no exit=ENOENT a0=56394639e0f0 a1=4 a2=0 a3=7c items=1 ppid=1 pid=1387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=bluetoothd exe=/usr/libexec/bluetooth/bluetoothd subj=system_u:system_r:bluetooth_t:s0 key=(null)

type=AVC msg=audit(1702496797.274:129): avc: denied { read write } for pid=1387 comm="bluetoothd" name="seq" dev="devtmpfs" ino=745 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:sound_device_t:s0 tclass=chr_file permissive=1 type=AVC msg=audit(1702496797.274:129): avc: denied { open } for pid=1387 comm="bluetoothd" path="/dev/snd/seq" dev="devtmpfs" ino=745 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:sound_device_t:s0 tclass=chr_file permissive=1 type=SYSCALL msg=audit(1702496797.274:129): arch=x86_64 syscall=openat success=yes exit=ETXTBSY a0=ffffff9c a1=7f28825ca24d a2=80002 a3=0 items=1 ppid=1 pid=1387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=bluetoothd exe=/usr/libexec/bluetooth/bluetoothd subj=system_u:system_r:bluetooth_t:s0 key=(null) type=CWD msg=audit(1702496797.274:129): cwd=/ type=PATH msg=audit(1702496797.274:129): item=0 name=/dev/snd/seq inode=745 dev=00:05 mode=020660 ouid=0 ogid=63 rdev=74:01 obj=system_u:object_r:sound_device_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0

Resolves: rhbz#2254422