search

fedora-selinux / selinux-policy

selinux-policy for Fedora is a large patch off the mainline
GNU General Public License v2.0
156 stars 157 forks source link

Allow virtqemud manage nfs files when virt_use_nfs boolean is on #2175

Closed zpytela closed 2 weeks ago

zpytela commented 2 weeks ago

The commit addresses the following AVC denial: type=AVC msg=audit(1717642887.414:2031): avc: denied { write } for pid=65361 comm="rpc-virtqemud" name="rhel10.qcow2" dev="0:53" ino=203153578 scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:nfs_t:s0 tclass=file permissive=1 type=AVC msg=audit(1717642888.009:2035): avc: denied { setattr } for pid=65362 comm="rpc-virtqemud" name="rhel10.qcow2" dev="0:53" ino=203153578 scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:nfs_t:s0 tclass=file permissive=1

Resolves: RHEL-40205