Open cboltz opened 3 days ago
Running iotop on Tumbleweed, the audit.log shows denials for netlink raw. Needed rules:
network (getattr) netlink raw, network (receive) netlink raw, network (send) netlink raw,
which can be merged to
network (getattr, receive, send) netlink raw,
Would adding network netlink raw, be enough? and quite similar?
network netlink raw,
That is a bit more permissive, but will of course also work.
Running iotop on Tumbleweed, the audit.log shows denials for netlink raw. Needed rules:
which can be merged to