nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

kernel: dontaudit read fixed disk devices

Browse Source 
This is triggered rook-ceph creates its OSDs.

Signed-off-by: Kenton Groombridge <concord@gentoo.org>
This commit is contained in:
Kenton Groombridge 2024-02-07 20:47:50 -05:00
parent 5ab2cf6a6a
commit 08adc2fadb
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
policy/modules/kernel/kernel.te
View File

@ -514,6 +514,10 @@ optional_policy(`
seutil_domtrans_setfiles(kernel_t)
')
optional_policy(`
storage_dontaudit_read_fixed_disk(kernel_t)
')
optional_policy(`
unconfined_domain_noaudit(kernel_t)
')