Skip to content

Commit

Permalink
Allow alsa get attributes filesystems with extended attributes
Browse files Browse the repository at this point in the history
The commit addresses the following AVC denial:
type=AVC msg=audit(1700102760.194:134): avc:  denied  { getattr } for  pid=1349 comm="rm" name="/" dev="dm-0" ino=2 scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=0

Resolves: rhbz#2249960
  • Loading branch information
zpytela committed Dec 22, 2023
1 parent 48593ca commit 19aeafb
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions policy/modules/contrib/alsa.te
Original file line number Diff line number Diff line change
Expand Up @@ -88,6 +88,8 @@ dev_write_sound(alsa_t)

files_search_var_lib(alsa_t)

fs_getattr_xattr_fs(alsa_t)

modutils_domtrans_kmod(alsa_t)

term_dontaudit_use_console(alsa_t)
Expand Down

0 comments on commit 19aeafb

Please sign in to comment.