Nicolas Iooss d7f66dce04 entropyd: allow haveged to create a Unix socket to received commands ... haveged listens to commands using a Unix socket (at path "\0/sys/entropy/haveged" according to https://github.com/jirka-h/haveged/blob/1.9.4/src/havegecmd.h#L34). The implementation of this server is available on https://github.com/jirka-h/haveged/blob/1.9.4/src/havegecmd.c . This fixes the following denial: type=AVC msg=audit(1551002989.396:27): avc: denied { listen } for pid=262 comm="haveged" path=002F7379732F656E74726F70792F68617665676564 scontext=system_u:system_r:entropyd_t tcontext=system_u:system_r:entropyd_t tclass=unix_stream_socket permissive=1 Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>		2019-08-18 21:34:52 +02:00
..
flask	Remove incorrect comment about capability2:mac_admin.	2019-03-11 20:49:42 -04:00
modules	entropyd: allow haveged to create a Unix socket to received commands	2019-08-18 21:34:52 +02:00
support	obj_perm_sets.spt: Add xdp_socket to socket_class_set.	2018-10-23 17:18:43 -04:00
constraints	…
context_defaults	…
global_booleans	…
global_tunables	…
mcs	…
mls	Remove unused translate permission in context userspace class.	2018-10-13 13:39:18 -04:00
policy_capabilities	…
users	…