From d5b75d954771da98c36fb7af90e24a14fb01c184 Mon Sep 17 00:00:00 2001 From: Zdenek Pytela Date: Mon, 31 Jan 2022 12:47:23 +0100 Subject: [PATCH] Allow alsactl set group Process ID of a process Reference: https://gitbub.com/fedora-selinux/selinux-policy/commit/d5b75d954771da98c36fb7af90e24a14fb01c184 Conflict: NA Addresses the following AVC denial: type=AVC msg=audit(1624169904.74:1152): avc: denied { setpgid } for pid=115535 comm="alsactl" scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:system_r:alsa_t:s0 tclass=process permissive=0 Resolves: rhbz#1974051 Signed-off-by: lujie54 --- policy/modules/contrib/alsa.te | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/policy/modules/contrib/alsa.te b/policy/modules/contrib/alsa.te index 97f3815..aee9fe8 100644 --- a/policy/modules/contrib/alsa.te +++ b/policy/modules/contrib/alsa.te @@ -43,7 +43,7 @@ systemd_unit_file(alsa_unit_file_t) allow alsa_t self:capability { dac_read_search setgid setuid ipc_owner sys_nice }; dontaudit alsa_t self:capability { sys_tty_config sys_admin }; -allow alsa_t self:process { getsched setsched signal_perms }; +allow alsa_t self:process { getsched setpgid setsched signal_perms }; allow alsa_t self:sem create_sem_perms; allow alsa_t self:shm create_shm_perms; allow alsa_t self:unix_stream_socket { accept listen }; -- 1.8.3.1