Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Allow xdm write to gnome-initial-setup fifo files
The commit addresses the following AVC denial: type=PROCTITLE msg=audit(09/18/2024 16:14:09.301:217) : proctitle=/usr/bin/gnome-shell type=SYSCALL msg=audit(09/18/2024 16:14:09.301:217) : arch=x86_64 syscall=recvmsg success=yes exit=52 a0=0xad a1=0x7ffcc3ba4450 a2=MSG_DONTWAIT|MSG_CMSG_CLOEXEC a3=0x0 items=0 ppid=1166 pid=1178 auid=unset uid=gnome-initial-setup gid=gnome-initial-setup euid=gnome-initial-setup suid=gnome-initial-setup fsuid=gnome-initial-setup egid=gnome-initial-setup sgid=gnome-initial-setup fsgid=gnome-initial-setup tty=tty1 ses=unset comm=gnome-shell exe=/usr/bin/gnome-shell subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(09/18/2024 16:14:09.301:217) : avc: denied { write } for pid=1178 comm=gnome-shell path=pipe:[19167] dev="pipefs" ino=19167 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:gnome_initial_setup_t:s0-s0:c0.c1023 tclass=fifo_file permissive=0 Resolves: rhbz#2278845
- Loading branch information