fedora-selinux / selinux-policy

selinux-policy for Fedora is a large patch off the mainline
GNU General Public License v2.0
156 stars 157 forks source link

Allow systemd-sleep read raw disk data #2079

Closed zpytela closed 2 months ago

zpytela commented 2 months ago

The commit addresses the following issue: audit[5317]: AVC avc: denied { read } for pid=5317 comm="systemd-sleep" name="dm-1" dev="devtmpfs" ino=423 scontext=system_u:system_r:systemd_sleep_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=0 systemd-sleep[5317]: Failed to find location to hibernate to: Permission denied systemd[1]: systemd-hibernate.service: Main process exited, code=exited, status=1/FAILURE systemd[1]: systemd-hibernate.service: Failed with result 'exit-code'. systemd[1]: Failed to start systemd-hibernate.service - System Hibernate.

Resolves: rhbz#2273959