David Sugar 03f248c9e1 Allow clamd_t to read /proc/sys/crypt/fips_enabled ... To fix the following denials: type=AVC msg=audit(1540821927.216:215): avc: denied { search } for pid=1726 comm="clamd" name="crypto" dev="proc" ino=68 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir type=AVC msg=audit(1540821927.216:215): avc: denied { read } for pid=1726 comm="clamd" name="fips_enabled" dev="proc" ino=69 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=file type=AVC msg=audit(1540821927.216:215): avc: denied { open } for pid=1726 comm="clamd" path="/proc/sys/crypto/fips_enabled" dev="proc" ino=69 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=file type=AVC msg=audit(1540821927.216:216): avc: denied { getattr } for pid=1726 comm="clamd" path="/proc/sys/crypto/fips_enabled" dev="proc" ino=69 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=file Signed-off-by: Dave Sugar <dsugar@tresys.com>		2018-11-09 19:06:01 -05:00
..
admin	logrotate: Module version bump.	2018-10-13 13:39:18 -04:00
apps	mozilla, devices, selinux, xserver, init, iptables: Module version bump.	2018-07-10 20:11:40 -04:00
kernel	Remove unused translate permission in context userspace class.	2018-10-13 13:39:18 -04:00
roles	Move all files out of the old contrib directory.	2018-06-23 10:38:58 -04:00
services	Allow clamd_t to read /proc/sys/crypt/fips_enabled	2018-11-09 19:06:01 -05:00
system	Add interface udev_run_domain	2018-11-09 19:04:22 -05:00