fedora-selinux / selinux-policy

selinux-policy for Fedora is a large patch off the mainline
GNU General Public License v2.0
164 stars 165 forks source link

Allow init_t nnp domain transition to abrtd_t #2028

Closed zpytela closed 7 months ago

zpytela commented 8 months ago

The permission is required in abrt v2.17.2 which contains miscellaneous service sandboxing features.

The commit addresses the following AVC denial: Feb 05 14:39:14 fedora audit[729]: AVC avc: denied { nnp_transition } for pid=729 comm="(abrtd)" scontext=system_u:system_r:init_t:s0 tcontext=system_u:system_r:abrt_t:s0-s0:c0.c1023 tclass=process2 permissive=0 Feb 05 14:39:14 fedora audit: SELINUX_ERR op=security_bounded_transition seresult=denied oldcontext=system_u:system_r:init_t:s0 newcontext=system_u:system_r:abrt_t:s0-s0:c0.c1023

Resolves: rhbz#2263210