fedora-selinux / selinux-policy

selinux-policy for Fedora is a large patch off the mainline
GNU General Public License v2.0
156 stars 157 forks source link

Allow svirt_tcg_t map svirt_image_t files #2102

Closed zpytela closed 2 months ago

zpytela commented 2 months ago

The commit addresses the following AVC denial: type=AVC msg=audit(1710328208.112:388): avc: denied { map } for pid=3395 comm="qemu-system-aar" path="/home/username//CentOS-9-stream/username-centos-9-stream_aarch64/nvdimm-0.dev" dev="sdb4" ino=789153 scontext=system_u:system_r:svirt_tcg_t:s0:c23,c892 tcontext=system_u:object_r:svirt_image_t:s0:c23,c892 tclass=file permissive=0

Resolves: rhbz#2270027