Nicolas Iooss de99bc36dd apt: allow preventing shutdown by calling a systemd-logind D-Bus method ... Since apt 1.8.1 (more precisely since commit 60cc44d160), apt calls D-Bus method "Inhibit" of interface "org.freedesktop.login1.Manager" in order to prevent a shutdown from happening while installing software. The call from apt to systemd-logind was already allowed through unconfined_dbus_send(apt_t), but not the reply, which triggered the following audit log: type=USER_AVC msg=audit(1567780304.196:651): pid=287 uid=105 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t msg='avc: denied { send_msg } for msgtype=method_return dest=:1.137 spid=290 tpid=29557 scontext=system_u:system_r:systemd_logind_t tcontext=sysadm_u:sysadm_r:apt_t tclass=dbus permissive=0 exe="/usr/bin/dbus-daemon" sauid=105 hostname=? addr=? terminal=?' Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>		2019-09-06 18:38:59 +02:00
..
flask	Remove incorrect comment about capability2:mac_admin.	2019-03-11 20:49:42 -04:00
modules	apt: allow preventing shutdown by calling a systemd-logind D-Bus method	2019-09-06 18:38:59 +02:00
support	obj_perm_sets.spt: Add xdp_socket to socket_class_set.	2018-10-23 17:18:43 -04:00
constraints	refpolicy: Update for kernel sctp support	2018-03-21 14:14:37 -04:00
context_defaults	…
global_booleans	…
global_tunables	…
mcs	refpolicy: Update for kernel sctp support	2018-03-21 14:14:37 -04:00
mls	Remove unused translate permission in context userspace class.	2018-10-13 13:39:18 -04:00
policy_capabilities	Enable cgroup_seclabel and nnp_nosuid_transition.	2018-01-16 18:52:39 -05:00
users	…