Skip to content

Commit

Permalink
Allow gnome-remote-desktop dbus chat with policykit
Browse files Browse the repository at this point in the history
The commit addresses the following USER_AVC denial:
type=USER_AVC msg=audit(10/26/2024 06:47:07.080:612) : pid=792 uid=dbus auid=unset ses=unset subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for  scontext=system_u:system_r:gnome_remote_desktop_t:s0 tcontext=system_u:system_r:policykit_t:s0 tclass=dbus permissive=1 exe=/usr/bin/dbus-broker sauid=dbus hostname=? addr=? terminal=?'
  • Loading branch information
zpytela committed Nov 19, 2024
1 parent 5e8755a commit ab6cab8
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions policy/modules/contrib/gnome_remote_desktop.te
Original file line number Diff line number Diff line change
Expand Up @@ -62,6 +62,10 @@ optional_policy(`
miscfiles_read_localization(gnome_remote_desktop_t)
')

optional_policy(`
policykit_dbus_chat(gnome_remote_desktop_t)
')

optional_policy(`
systemd_login_list_pid_dirs(gnome_remote_desktop_t)
systemd_login_read_pid_files(gnome_remote_desktop_t)
Expand Down

0 comments on commit ab6cab8

Please sign in to comment.