Skip to content

Commit

Permalink
Allow thumb_t map dri devices
Browse files Browse the repository at this point in the history
The commit addresses the following AVC denial:
type=AVC msg=audit(1710140836.332:583): avc:  denied  { map } for  pid=1093967 comm="gst-plugin-scan" path="/dev/dri/renderD128" dev="devtmpfs" ino=458 scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=system_u:object_r:dri_device_t:s0 tclass=chr_file permissive=1

Resolves: rhbz#2268960
  • Loading branch information
zpytela committed Sep 4, 2024
1 parent bf29ee1 commit 7ece861
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions policy/modules/contrib/thumb.te
Original file line number Diff line number Diff line change
Expand Up @@ -77,6 +77,7 @@ corecmd_exec_shell(thumb_t)
corenet_tcp_connect_xserver_port(thumb_t)
corenet_dontaudit_tcp_connect_all_ports(thumb_t)

dev_map_dri(thumb_t)
dev_read_sysfs(thumb_t)
dev_read_urand(thumb_t)
dev_dontaudit_rw_dri(thumb_t)
Expand Down

0 comments on commit 7ece861

Please sign in to comment.