fedora-selinux / selinux-policy

selinux-policy for Fedora is a large patch off the mainline
GNU General Public License v2.0
156 stars 157 forks source link

Allow tpm2 generator setfscreate #2150

Closed zpytela closed 4 weeks ago

zpytela commented 4 weeks ago

The commit addresses the following AVC denial: Jun 05 06:43:02 kernel: audit: type=1400 audit(1717584182.445:7): avc: denied { setfscreate } for pid=1042 comm="systemd-tpm2-ge" scontext=system_u:system_r:systemd_tpm2_generator_t:s0 tcontext=system_u:system_r:systemd_tpm2_generator_t:s0 tclass=process permissive=0

Resolves: rhbz#2290515