fedora-selinux / selinux-policy

selinux-policy for Fedora is a large patch off the mainline
GNU General Public License v2.0
156 stars 157 forks source link

Allow sandbox_x_client_t dbus chat with accountsd #2116

Closed zpytela closed 1 month ago

zpytela commented 1 month ago

The commit addresses the following AVC denial: type=USER_AVC msg=audit(05/13/2024 10:21:39.922:837) : pid=799 uid=dbus auid=unset ses=unset subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for scontext=system_u:system_r:accountsd_t:s0 tcontext=staff_u:staff_r:sandbox_x_client_t:s0:c13,c243 tclass=dbus permissive=0 exe=/usr/bin/dbus-broker sauid=dbus hostname=? addr=? terminal=?'

packit-as-a-service[bot] commented 1 month ago

Cockpit tests failed for commit 782709c6e2831c306648ead7eda41455954f6e27. @martinpitt, @jelly, @mvollmer please check.