Skip to content

Commit

Permalink
Allow coreos-installer domain transition on udev execution
Browse files Browse the repository at this point in the history
The commit addresses the following AVC denial:
AVC avc:  denied  { getattr } for  pid=1201 comm="coreos-installe" path="/usr/bin/udevadm" dev="loop1" ino=4263 scontext=system_u:system_r:coreos_installer_t:s0 tcontext=system_u:object_r:udev_exec_t:s0 tclass=file permissive=0

Resolves: rhbz#2305385
  • Loading branch information
zpytela committed Nov 19, 2024
1 parent cd57e25 commit 3e7b1f2
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions policy/modules/contrib/coreos_installer.te
Original file line number Diff line number Diff line change
Expand Up @@ -84,6 +84,10 @@ optional_policy(`
sysnet_dns_name_resolve(coreos_installer_t)
')

optional_policy(`
udev_domtrans(coreos_installer_t)
')

########################################
#
# coreos_boot_mount_generator
Expand Down

0 comments on commit 3e7b1f2

Please sign in to comment.