fedora-selinux / selinux-policy

selinux-policy for Fedora is a large patch off the mainline
GNU General Public License v2.0
161 stars 162 forks source link

Allow httpd work with PrivateTmp #1999

Closed zpytela closed 7 months ago

zpytela commented 7 months ago

In particular, assign httpd_tmp_t to the systemd_private_tmp_type attribute.

The commit addresses the following AVC denial example: type=AVC msg=audit(1705486932.024:438): avc: denied { remove_name } for pid=8044 comm="(sd-rmrf)" name="test" dev="tmpfs" ino=169 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:httpd_tmp_t:s0 tclass=dir permissive=0

Resolves: rhbz#2258637