selinux-refpolicy/policy/modules
Nicolas Iooss d7f66dce04
entropyd: allow haveged to create a Unix socket to received commands
haveged listens to commands using a Unix socket
(at path "\0/sys/entropy/haveged" according to
https://github.com/jirka-h/haveged/blob/1.9.4/src/havegecmd.h#L34).
The implementation of this server is available on
https://github.com/jirka-h/haveged/blob/1.9.4/src/havegecmd.c .

This fixes the following denial:

    type=AVC msg=audit(1551002989.396:27): avc:  denied  { listen } for
    pid=262 comm="haveged"
    path=002F7379732F656E74726F70792F68617665676564
    scontext=system_u:system_r:entropyd_t
    tcontext=system_u:system_r:entropyd_t tclass=unix_stream_socket
    permissive=1

Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>
2019-08-18 21:34:52 +02:00
..
admin rpm, selinux, sysadm, init: Module version bump. 2019-07-13 14:07:11 -04:00
apps Bump module versions for release. 2019-06-09 14:05:19 -04:00
kernel devices, storage: Module version bump 2019-07-29 20:50:45 -04:00
roles rpm, selinux, sysadm, init: Module version bump. 2019-07-13 14:07:11 -04:00
services entropyd: allow haveged to create a Unix socket to received commands 2019-08-18 21:34:52 +02:00
system systemd: Module version bump. 2019-07-21 14:34:09 -04:00