fedora-selinux / selinux-policy

selinux-policy for Fedora is a large patch off the mainline
GNU General Public License v2.0
156 stars 157 forks source link

Allow ptp4l_t request that the kernel load a kernel module #2172

Closed zpytela closed 2 weeks ago

zpytela commented 2 weeks ago

The commit addresses the following AVC denial: type=AVC msg=audit(1716862418.381:226): avc: denied { module_request } for pid=13694 comm="ptp4l" kmod="netdev-eth0" scontext=system_u:system_r:ptp4l_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=0 type=SYSCALL msg=audit(1716862418.381:226): arch=x86_64 syscall=ioctl success=no exit=ENODEV a0=1a a1=8933 a2=7fff83c07cb0 a3=7f73dfb5cac0 items=0 ppid=1 pid=13694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=ptp4l exe=/usr/sbin/ptp4l subj=system_u:system_r:ptp4l_t:s0 key=(null)

Resolves: RHEL-38905