Skip to content

Commit

Permalink
Allow chronyd read networkmanager's pid files
Browse files Browse the repository at this point in the history
The commit addresses the following AVC denial:
type=AVC msg=audit(1717458744.849:161): avc:  denied  { getattr } for  pid=1487 comm="chronyd" path="/run/NetworkManager/no-stub-resolv.conf" dev="tmpfs" ino=2481 scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:object_r:NetworkManager_var_run_t:s0 tclass=file permissive=0

Resolves: rhbz#2290310
  • Loading branch information
zpytela committed Nov 19, 2024
1 parent 234e360 commit 281599e
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions policy/modules/contrib/chronyd.te
Original file line number Diff line number Diff line change
Expand Up @@ -163,6 +163,10 @@ optional_policy(`
gpsd_rw_shm(chronyd_t)
')

optional_policy(`
networkmanager_read_pid_files(chronyd_t)
')

optional_policy(`
virt_read_lib_files(chronyd_t)
')
Expand Down

0 comments on commit 281599e

Please sign in to comment.