Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Allow sssd io_uring sqpoll permission
In the d2c31f429b libuv commit ("linux: introduce io_uring support", libuv/libuv@d2c31f429b) support for io_uring was added which requires the sqpoll SELinux permissions for services linked with libuv or executing a non-confined command (e. g. /usr/bin/nsupdate) which is linked with libuv. The commit addresses the following AVC denial: type=AVC msg=audit(1689629587.147:175): avc: denied { sqpoll } for pid=3950 comm="nsupdate" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=io_uring permissive=0 Resolves: rhbz#2241105
- Loading branch information