nnd
/
selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

systemd: allow notify client to stat socket 

Caused by the latest openssh version in Debian sid:

    AVC avc:  denied  { getattr } for  pid=13544 comm="sshd" path="/run/systemd/notify" dev="tmpfs" ino=286 scontext=system_u:system_r:sshd_t:s0 tcontext=system_u:object_r:systemd_runtime_notify_t:s0 tclass=sock_file permissive=0

Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
This commit is contained in:
Christian Göttsche 2024-04-04 22:38:40 +02:00
parent 6507eebc23
commit cbf56c8aea
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/system/systemd.if
View File

@ -322,7 +322,7 @@ interface(`systemd_write_notify_socket',`
init_list_runtime($1)
init_unix_stream_socket_sendto($1)
allow $1 systemd_runtime_notify_t:sock_file write;
allow $1 systemd_runtime_notify_t:sock_file write_sock_file_perms;
')
######################################