From c0e77208bed103a3bde399b0dc59549e63481a14 Mon Sep 17 00:00:00 2001 From: Jason Zaman Date: Tue, 24 Dec 2019 18:10:39 +0800 Subject: [PATCH] dirmngr: accept unix stream socket dirmngr needs to listen and accept on /run/user/1000/gnupg/S.dirmngr type=AVC msg=audit(1554175286.968:2720907): avc: denied { accept } for pid=15692 comm="dirmngr" path="/run/user/1000/gnupg/S.dirmngr" scontext=staff_u:staff_r:dirmngr_t:s0-s0:c0.c1023 tcontext=staff_u:staff_r:dirmngr_t:s0-s0:c0.c1023 tclass=unix_stream_socket permissive=0 Signed-off-by: Jason Zaman --- policy/modules/services/dirmngr.te | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/services/dirmngr.te b/policy/modules/services/dirmngr.te index 056cd97bb..e34295e79 100644 --- a/policy/modules/services/dirmngr.te +++ b/policy/modules/services/dirmngr.te @@ -37,6 +37,7 @@ userdom_user_home_content(dirmngr_home_t) # allow dirmngr_t self:fifo_file rw_file_perms; +allow dirmngr_t self:unix_stream_socket rw_stream_socket_perms; allow dirmngr_t dirmngr_conf_t:dir list_dir_perms; allow dirmngr_t dirmngr_conf_t:file read_file_perms;