From 7dc3b6abbfaf6448f9fa5786a229f794f488fbb2 Mon Sep 17 00:00:00 2001 From: Zdenek Pytela Date: Fri, 20 Dec 2024 14:59:39 +0100 Subject: [PATCH] Allow xdm dbus chat with powerprofiled The commit addresses the following USER_AVC denial: type=USER_AVC msg=audit(12/17/2024 13:45:50.041:5188) : pid=788 uid=dbus auid=unset ses=unset subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for scontext=system_u:system_r:powerprofiles_t:s0 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=dbus permissive=1 exe=/usr/bin/dbus-broker sauid=dbus hostname=? addr=? terminal=?' --- policy/modules/contrib/powerprofiles.te | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/policy/modules/contrib/powerprofiles.te b/policy/modules/contrib/powerprofiles.te index b8947d2b74..0217f3228c 100644 --- a/policy/modules/contrib/powerprofiles.te +++ b/policy/modules/contrib/powerprofiles.te @@ -30,6 +30,10 @@ optional_policy(` optional_policy(` policykit_dbus_chat(powerprofiles_t) ') + + optional_policy(` + xserver_dbus_chat_xdm(powerprofiles_t) + ') ') optional_policy(`