Closed zpytela closed 3 weeks ago
The commit addresses the following AVC denial example: type=PROCTITLE msg=audit(06/10/2024 16:22:27.975:582) : proctitle=/usr/bin/gnome-software --gapplication-service type=PATH msg=audit(06/10/2024 16:22:27.975:582) : item=0 name=/var/cache/swcatalog/xml inode=813565 dev=fd:00 mode=dir,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0 type=SYSCALL msg=audit(06/10/2024 16:22:27.975:582) : arch=x86_64 syscall=inotify_add_watch success=yes exit=20 a0=0x3 a1=0x7fba47705ee0 a2=0x1002fce a3=0x0 items=1 ppid=5134 pid=5295 auid=staff uid=staff gid=staff euid=staff suid=staff fsuid=staff egid=staff sgid=staff fsgid=staff tty=(none) ses=3 comm=gnome-software exe=/usr/bin/gnome-software subj=staff_u:staff_r:staff_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(06/10/2024 16:22:27.975:582) : avc: denied { watch } for pid=5295 comm=gnome-software path=/var/cache/swcatalog/xml dev="dm-0" ino=813565 scontext=staff_u:staff_r:staff_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1
The commit addresses the following AVC denial example: type=PROCTITLE msg=audit(06/10/2024 16:22:27.975:582) : proctitle=/usr/bin/gnome-software --gapplication-service type=PATH msg=audit(06/10/2024 16:22:27.975:582) : item=0 name=/var/cache/swcatalog/xml inode=813565 dev=fd:00 mode=dir,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0 type=SYSCALL msg=audit(06/10/2024 16:22:27.975:582) : arch=x86_64 syscall=inotify_add_watch success=yes exit=20 a0=0x3 a1=0x7fba47705ee0 a2=0x1002fce a3=0x0 items=1 ppid=5134 pid=5295 auid=staff uid=staff gid=staff euid=staff suid=staff fsuid=staff egid=staff sgid=staff fsgid=staff tty=(none) ses=3 comm=gnome-software exe=/usr/bin/gnome-software subj=staff_u:staff_r:staff_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(06/10/2024 16:22:27.975:582) : avc: denied { watch } for pid=5295 comm=gnome-software path=/var/cache/swcatalog/xml dev="dm-0" ino=813565 scontext=staff_u:staff_r:staff_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1