fedora-selinux / selinux-policy

selinux-policy for Fedora is a large patch off the mainline
GNU General Public License v2.0
156 stars 157 forks source link

Allow abrt-dump-journal read all non_security socket files #2211

Closed zpytela closed 5 hours ago

zpytela commented 5 days ago

The commit addresses the following AVC denial: type=AVC msg=audit(1719926548.159:637): avc: denied { getattr } for pid=2385 comm="abrt-dump-journ" path="/run/samba/winbindd/pipe" dev="tmpfs" ino=3370 scontext=system_u:system_r:abrt_dump_oops_t:s0 tcontext=system_u:object_r:winbind_var_run_t:s0 tclass=sock_file permissive=0

Resolves: rhbz#2295175