search

fedora-selinux / selinux-policy

selinux-policy for Fedora is a large patch off the mainline
GNU General Public License v2.0
156 stars 157 forks source link

Allow staff_t the io_uring sqpoll permission #2117

Closed zpytela closed 1 month ago

zpytela commented 1 month ago

The commit addresses the following AVC denial: type=PROCTITLE msg=audit(10.5.2024 18:11:00.485:871) : proctitle=/opt/app type=SYSCALL msg=audit(10.5.2024 18:11:00.485:871) : arch=x86_64 syscall=io_uring_setup success=yes exit=7 a0=0x40 a1=0x7ffe85d540b0 a2=0x53 a3=0x1aa800238600 items=0 ppid=83930 pid=84132 auid=username uid=username gid=username euid=username suid=username fsuid=username egid=username sgid=username fsgid=username tty=(none) ses=3 comm=freetube exe=/opt/FreeTube/freetube subj=staff_u:staff_r:staff_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(10.5.2024 18:11:00.485:871) : avc: denied { sqpoll } for pid=84132 comm=freetube scontext=staff_u:staff_r:staff_t:s0-s0:c0.c1023 tcontext=staff_u:staff_r:staff_t:s0-s0:c0.c1023 tclass=io_uring permissive=1

packit-as-a-service[bot] commented 1 month ago

Cockpit tests failed for commit 102cd537d9ea8056981fcac5f8f8dd62d42d02a5. @martinpitt, @jelly, @mvollmer please check.