Allow keyutils-dns-resolver connect to the system log service

fedora-selinux / selinux-policy

selinux-policy for Fedora is a large patch off the mainline

GNU General Public License v2.0

156 stars 157 forks source link

Allow keyutils-dns-resolver connect to the system log service #2075

Closed zpytela closed 2 months ago

zpytela commented 3 months ago

The commit addresses the following AVC denial: type=AVC msg=audit(1712345086.525:270): avc: denied { read } for pid=5751 comm="key.dns_resolve" name="log" dev="devtmpfs" ino=198 scontext=system_u:system_r:keyutils_dns_resolver_t:s0 tcontext=system_u:object_r:devlog_t:s0 tclass=lnk_file permissive=0

Resolves: rhbz#2273707

packit-as-a-service[bot] commented 3 months ago

Cockpit tests failed for commit 8f66640d581063b73790c2f911e3d5e831907f0a. @martinpitt, @jelly, @mvollmer please check.