Skip to content

Commit

Permalink
Allow systemd-sleep send a message to syslog over a unix dgram socket
Browse files Browse the repository at this point in the history
The commit addresses the following AVC denial:
type=AVC msg=audit(1702592947.333:248): avc:  denied  { sendto } for  pid=7245 comm="systemd-sleep" path="/run/systemd/journal/socket" scontext=system_u:system_r:systemd_sleep_t:s0 tcontext=system_u:system_r:syslogd_t:s0 tclass=unix_dgram_socket permissive=0

Resolves: rhbz#2254628
  • Loading branch information
zpytela committed Dec 15, 2023
1 parent 00ad835 commit f898b03
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions policy/modules/system/systemd.te
Original file line number Diff line number Diff line change
Expand Up @@ -1615,6 +1615,10 @@ init_search_var_lib_dirs(systemd_sleep_t)
storage_getattr_fixed_disk_dev(systemd_sleep_t)
storage_getattr_removable_dev(systemd_sleep_t)

optional_policy(`
logging_dgram_send(systemd_sleep_t)
')

optional_policy(`
sysstat_domtrans(systemd_sleep_t)
')
Expand Down

0 comments on commit f898b03

Please sign in to comment.