haveged listens to commands using a Unix socket (at path "\0/sys/entropy/haveged" according to https://github.com/jirka-h/haveged/blob/1.9.4/src/havegecmd.h#L34). The implementation of this server is available on https://github.com/jirka-h/haveged/blob/1.9.4/src/havegecmd.c . This fixes the following denial: type=AVC msg=audit(1551002989.396:27): avc: denied { listen } for pid=262 comm="haveged" path=002F7379732F656E74726F70792F68617665676564 scontext=system_u:system_r:entropyd_t tcontext=system_u:system_r:entropyd_t tclass=unix_stream_socket permissive=1 Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org> |
||
---|---|---|
.. | ||
admin | ||
apps | ||
kernel | ||
roles | ||
services | ||
system |