nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Resolve denial about logging to journal from dbus

Browse Source 
type=AVC msg=audit(1553013821.597:9897): avc:  denied  { sendto } for  pid=7377 comm="dbus-daemon" path="/dev/log" scontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1

Signed-off-by: Dave Sugar <dsugar@tresys.com>
This commit is contained in:
Sugar, David 2019-03-21 18:29:27 +00:00 committed by Chris PeBenito
parent 5f14e530ad
commit 142651a8b4
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
policy/modules/services/dbus.te
View File

@ -162,6 +162,9 @@ ifdef(`init_systemd', `
# for /run/systemd/dynamic-uid/ # for /run/systemd/dynamic-uid/
init_list_pids(system_dbusd_t) init_list_pids(system_dbusd_t)
init_read_runtime_symlinks(system_dbusd_t) init_read_runtime_symlinks(system_dbusd_t)
# for journald /dev/log
kernel_dgram_send(system_dbusd_t)
') ')
optional_policy(` optional_policy(`