fedora-selinux / selinux-policy

selinux-policy for Fedora is a large patch off the mainline
GNU General Public License v2.0
156 stars 157 forks source link

Allow abrt-dump-journal-core connect to systemd-machined #2103

Closed zpytela closed 2 months ago

zpytela commented 2 months ago

abrt-dump-journal-core was allowed to connect to systemd-machined over a unix socket.

The commit addresses the following AVC denial and 2 related ones: type=AVC msg=audit(1714352016.324:249): avc: denied { connectto } for pid=2471 comm="abrt-dump-journ" path="/run/systemd/userdb/io.systemd.Machine" scontext=system_u:system_r:abrt_dump_oops_t:s0 tcontext=system_u:system_r:systemd_machined_t:s0 tclass=unix_stream_socket permissive=0

Resolves: rhbz#2277658