Dontaudit sulogin the checkpoint_restore capability

fedora-selinux / selinux-policy

selinux-policy for Fedora is a large patch off the mainline

GNU General Public License v2.0

164 stars 165 forks source link

Dontaudit sulogin the checkpoint_restore capability #2052

Closed zpytela closed 7 months ago

zpytela commented 7 months ago

The commit dontaudits the following AVC denial: type=AVC msg=audit(1708518790.257:1208): avc: denied { checkpoint_restore } for pid=220682 comm="sulogin" capability=40 scontext=system_u:system_r:sulogin_t:s0-s0:c0.c1023 tcontext=system_u:system_r:sulogin_t:s0-s0:c0.c1023 tclass=capability2 permissive=0

Resolves: rhbz#2265391

packit-as-a-service[bot] commented 7 months ago

Cockpit tests failed for commit 86e080b17e0acff3160d688ed6f207677805128d. @martinpitt, @jelly, @mvollmer please check.