fedora-selinux / selinux-policy

selinux-policy for Fedora is a large patch off the mainline
GNU General Public License v2.0
156 stars 157 forks source link

Allow virtnodevd_t map /var/lib files #2106

Closed zpytela closed 2 months ago

zpytela commented 2 months ago

The commit addresses the following AVC denial: type=AVC msg=audit(1713915556.702:327): avc: denied { map } for pid=6585 comm="daemon-init" path="/var/lib/flatpak/exports/share/mime/mime.cache" dev="dm-0" ino=23772517 scontext=system_u:system_r:virtnodedevd_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=file permissive=0

Resolves: rhbz#2276779