From 4f44d3028edb3cda2b2c1d1fc7858b481d866b94 Mon Sep 17 00:00:00 2001 From: Zdenek Pytela Date: Fri, 19 Mar 2021 16:55:32 +0100 Reference: https://github.com/fedora-selinux/selinux-policy/commit/4f44d3028edb3cda2b2c1d1fc7858b481d866b94 Conflict: NA Subject: [PATCH] Allow local_login_t get attributes of tmpfs filesystems This permission is required when the system booted with cgroups v1. Resolves: rhbz#1894759 --- policy/modules/system/locallogin.te | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/system/locallogin.te b/policy/modules/system/locallogin.te index 10fa85d..e1e5649 100644 --- a/policy/modules/system/locallogin.te +++ b/policy/modules/system/locallogin.te @@ -113,6 +113,7 @@ files_create_home_dir(local_login_t) fs_search_auto_mountpoints(local_login_t) fs_getattr_cgroup(local_login_t) +fs_getattr_tmpfs(local_login_t) storage_dontaudit_getattr_fixed_disk_dev(local_login_t) storage_dontaudit_setattr_fixed_disk_dev(local_login_t) -- 1.8.3.1