Allow system_cronjob_t dbus chat with avahi_t

fedora-selinux / selinux-policy

selinux-policy for Fedora is a large patch off the mainline

GNU General Public License v2.0

156 stars 157 forks source link

Allow system_cronjob_t dbus chat with avahi_t #2119

Closed zpytela closed 1 month ago

zpytela commented 1 month ago

The commit addresses the following USER_AVC denial: type=USER_AVC msg=audit(04/10/2024 03:09:01.517:310) : pid=553 uid=dbus auid=unset ses=unset subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for scontext=system_u:system_r:avahi_t:s0 tcontext=system_u:system_r:system_cronjob_t:s0-s0:c0.c1023 tclass=dbus permissive=1 exe=/usr/bin/dbus-broker sauid=dbus hostname=? addr=? terminal=?'

Resolves: RHEL-32290

packit-as-a-service[bot] commented 1 month ago

Cockpit tests failed for commit 7c3dede0a47a422aa7807c1eb0084921b5841ae3. @martinpitt, @jelly, @mvollmer please check.