RepoMirrors/selinux-refpolicy
1
0
Fork 0
mirror of https://github.com/SELinuxProject/refpolicy synced 2025-03-11 07:40:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

unconfined: fix oddjob security_compute_sid

Browse Source 
type=PROCTITLE proctitle=mkhomedir_helper user123 0077

type=SYSCALL syscall=socket per=PER_LINUX success=yes exit=3 a0=local
a1=SOCK_STREAM a2=ip a3=0xbee9d8a8 items=0 ppid=404 pid=1386 auid=unset
uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root
fsgid=root tty=ttyAMA0 ses=unset comm=mkhomedir_helpe
exe=/usr/sbin/mkhomedir_helper
subj=unconfined_u:unconfined_r:oddjob_mkhomedir_t:s0-s0:c0.c1023
key=(null)

type=SELINUX_ERR op=security_compute_sid
invalid_context=unconfined_u:unconfined_r:oddjob_mkhomedir_t:s0-s0:c0.c1023
scontext=unconfined_u:unconfined_r:oddjob_mkhomedir_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:oddjob_mkhomedir_t:s0-s0:c0.c1023
tclass=unix_stream_socket

--

Similar problem and resolution:
https://github.com/SELinuxProject/refpolicy/pull/171

--

Fedora:
https://github.com/fedora-selinux/selinux-policy/blob/v41.33/policy/modules/roles/unconfineduser.te#L365

--

Reference:
https://github.com/SELinuxProject/selinux-notebook/blob/main/src/auditing.md#general-selinux-audit-events

Signed-off-by: Clayton Casciato <ccasciato@21sw.us>
This commit is contained in:
Clayton Casciato 2025-03-03 10:40:41 -07:00
parent 78c8473272
commit bcb8e1d4db
No known key found for this signature in database
1 changed files with 1 additions and 1 deletions

2
policy/modules/system/unconfined.te
View File

@ -155,7 +155,7 @@ optional_policy(`
')
optional_policy(`
oddjob_domtrans_mkhomedir(unconfined_t)
oddjob_run_mkhomedir(unconfined_t, unconfined_r)
')
optional_policy(`