34 lines
1.4 KiB
Diff
34 lines
1.4 KiB
Diff
From d5b75d954771da98c36fb7af90e24a14fb01c184 Mon Sep 17 00:00:00 2001
|
|
From: Zdenek Pytela <zpytela@redhat.com>
|
|
Date: Mon, 31 Jan 2022 12:47:23 +0100
|
|
Subject: [PATCH] Allow alsactl set group Process ID of a process
|
|
|
|
Reference: https://gitbub.com/fedora-selinux/selinux-policy/commit/d5b75d954771da98c36fb7af90e24a14fb01c184
|
|
Conflict: NA
|
|
|
|
Addresses the following AVC denial:
|
|
type=AVC msg=audit(1624169904.74:1152): avc: denied { setpgid } for pid=115535 comm="alsactl" scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:system_r:alsa_t:s0 tclass=process permissive=0
|
|
|
|
Resolves: rhbz#1974051
|
|
Signed-off-by: lujie54 <lujie54@huawei.com>
|
|
---
|
|
policy/modules/contrib/alsa.te | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/policy/modules/contrib/alsa.te b/policy/modules/contrib/alsa.te
|
|
index 97f3815..aee9fe8 100644
|
|
--- a/policy/modules/contrib/alsa.te
|
|
+++ b/policy/modules/contrib/alsa.te
|
|
@@ -43,7 +43,7 @@ systemd_unit_file(alsa_unit_file_t)
|
|
|
|
allow alsa_t self:capability { dac_read_search setgid setuid ipc_owner sys_nice };
|
|
dontaudit alsa_t self:capability { sys_tty_config sys_admin };
|
|
-allow alsa_t self:process { getsched setsched signal_perms };
|
|
+allow alsa_t self:process { getsched setpgid setsched signal_perms };
|
|
allow alsa_t self:sem create_sem_perms;
|
|
allow alsa_t self:shm create_shm_perms;
|
|
allow alsa_t self:unix_stream_socket { accept listen };
|
|
--
|
|
1.8.3.1
|
|
|