fedora-selinux / selinux-policy

selinux-policy for Fedora is a large patch off the mainline
GNU General Public License v2.0
156 stars 157 forks source link

Allow virtqemud read vm sysctls #2141

Closed zpytela closed 1 month ago

zpytela commented 1 month ago

Required by qemu-system-ppc on the ppc64le architecture.

The commit addresses the following AVC denial: type=AVC msg=audit(1716962750.427:216): avc: denied { read } for pid=3074 comm="qemu-system-ppc" name="max_map_count" dev="proc" ino=53342 scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:sysctl_vm_t:s0 tclass=file permissive=1

Resolves: rhbz#2283792