33 lines
1.2 KiB
Diff
33 lines
1.2 KiB
Diff
From d9bf0729b58d4e3c0c66015961013c1cb64c4a24 Mon Sep 17 00:00:00 2001
|
|
From: Zdenek Pytela <zpytela@redhat.com>
|
|
Date: Thu, 20 Jan 2022 17:15:18 +0100
|
|
Subject: [PATCH] Allow tumblerd write to session_dbusd tmp socket files
|
|
|
|
Reference: https://gitbub.com/fedora-selinux/selinux-policy/commit/d9bf0729b58d4e3c0c66015961013c1cb64c4a24
|
|
Conflict: NA
|
|
|
|
Addresses the following AVC denial:
|
|
type=AVC msg=audit(1642635456.954:3314): avc: denied { write } for pid=104519 comm="tumblerd" name="bus" dev="tmpfs" ino=40 scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=system_u:object_r:session_dbusd_tmp_t:s0 tclass=sock_file permissive=0
|
|
|
|
Resolves: rhbz#2042696
|
|
Signed-off-by: lujie54 <lujie54@huawei.com>
|
|
---
|
|
policy/modules/contrib/thumb.te | 1 +
|
|
1 file changed, 1 insertion(+)
|
|
|
|
diff --git a/policy/modules/contrib/thumb.te b/policy/modules/contrib/thumb.te
|
|
index 0444a36..27eb72c 100644
|
|
--- a/policy/modules/contrib/thumb.te
|
|
+++ b/policy/modules/contrib/thumb.te
|
|
@@ -146,6 +146,7 @@ optional_policy(`
|
|
dbus_stream_connect_session_bus(thumb_t)
|
|
dbus_chat_session_bus(thumb_t)
|
|
dbus_system_bus_client(thumb_t)
|
|
+ dbus_write_session_tmp_sock_files(thumb_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
--
|
|
1.8.3.1
|
|
|