Skip to content

Commit

Permalink
Allow virtstoraged read vm sysctls
Browse files Browse the repository at this point in the history
The commit addresses the following AVC denial:
type=AVC msg=audit(1730400003.494:574): avc:  denied  { read } for  pid=9258 comm="qemu-img" name="max_map_count" dev="proc" ino=13333 scontext=system_u:system_r:virtstoraged_t:s0 tcontext=system_u:object_r:sysctl_vm_t:s0 tclass=file permissive=1

Resolves: fedora-selinux#2416
  • Loading branch information
zpytela committed Nov 8, 2024
1 parent 017e1e0 commit a06f010
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions policy/modules/contrib/virt.te
Original file line number Diff line number Diff line change
Expand Up @@ -2342,6 +2342,7 @@ manage_lnk_files_pattern(virtstoraged_t, virt_etc_rw_t, virt_etc_rw_t)

kernel_get_sysvipc_info(virtstoraged_t)
kernel_io_uring_use(virtstoraged_t)
kernel_read_vm_sysctls(virtstoraged_t)

corecmd_exec_bin(virtstoraged_t)

Expand Down

0 comments on commit a06f010

Please sign in to comment.