nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Denial during cockpit use

Browse Source 
node=localhost type=USER_AVC msg=audit(1702256090.674:226515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  denied  { status } for auid=n/a uid=0 gid=0 path="/usr/lib/systemd/system/chronyd.service" cmdline="/usr/lib/systemd/systemd-timedated" function="mac_selinux_filter" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:chronyd_unit_t:s0 tclass=service permissive=0 exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=?  terminal=?' UID="root" AUID="unset" AUID="root" UID="root" GID="root" SAUID="root"

Signed-off-by: Dave Sugar <dsugar100@gmail.com>
This commit is contained in:
Dave Sugar 2023-12-10 21:00:34 -05:00
parent a95feb6cdd
commit d80c8f421f
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/services/chronyd.if
View File

@ -257,6 +257,7 @@ interface(`chronyd_enabledisable',`
class service { enable disable };
')
chronyd_status($1)
allow $1 chronyd_unit_t:service { enable disable };
')
@ -276,6 +277,7 @@ interface(`chronyd_startstop',`
class service { start stop };
')
chronyd_status($1)
allow $1 chronyd_unit_t:service { start stop };
')