Skip to content

Commit

Permalink
Allow kdump work with PrivateTmp
Browse files Browse the repository at this point in the history
In particular, assign kdumpctl_tmp_t
to the systemd_private_tmp_type attribute.

The commit addresses the following AVC denial:
AVC avc:  denied  { remove_name } for  pid=2386 comm="(sd-rmrf)" name="tmp" dev="vda5" ino=201741 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:kdumpctl_tmp_t:s0 tclass=dir permissive=0

Resolves: rhbz#2246046
  • Loading branch information
zpytela committed Nov 13, 2023
1 parent 27d36be commit 2fb568c
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions policy/modules/contrib/kdump.te
Original file line number Diff line number Diff line change
Expand Up @@ -199,6 +199,10 @@ optional_policy(`
ssh_exec(kdumpctl_t)
')

optional_policy(`
systemd_private_tmp(kdumpctl_tmp_t)
')

optional_policy(`
unconfined_domain(kdumpctl_t)
')

0 comments on commit 2fb568c

Please sign in to comment.