Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

F40 backports #2440

Open
wants to merge 2 commits into
base: f40
Choose a base branch
from
Open

F40 backports #2440

wants to merge 2 commits into from

Commits on Nov 19, 2024

  1. Allow chronyd read networkmanager's pid files

    The commit addresses the following AVC denial:
    type=AVC msg=audit(1717458744.849:161): avc:  denied  { getattr } for  pid=1487 comm="chronyd" path="/run/NetworkManager/no-stub-resolv.conf" dev="tmpfs" ino=2481 scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:object_r:NetworkManager_var_run_t:s0 tclass=file permissive=0
    
    Resolves: rhbz#2290310
    zpytela committed Nov 19, 2024
    Configuration menu
    Copy the full SHA
    aa453b2 View commit details
    Browse the repository at this point in the history
  2. Allow tlp the setpgid process permission

    The commit addresses the following AVC denial:
    type=AVC msg=audit(14. okt. 2024 09:35:47.580:341) : avc:  denied  { setpgid } for  pid=10546 comm=timeout scontext=system_u:system_r:tlp_t:s0 tcontext=system_u:system_r:tlp_t:s0 tclass=process permissive=0
    type=PROCTITLE msg=audit(14. okt. 2024 18:00:35.038:594) : proctitle=timeout 2 flock -x 9
    type=SYSCALL msg=audit(14. okt. 2024 18:00:35.038:594) : arch=x86_64 syscall=setpgid success=no exit=EACCES(Permission denied) a0=0x0 a1=0x0 a2=0x0 a3=0x10000000000000 items=0 ppid=40368 pid=40408 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=timeout exe=/usr/bin/timeout subj=system_u:system_r:tlp_t:s0 key=(null)
    
    Resolves: rhbz#2317893
    zpytela committed Nov 19, 2024
    Configuration menu
    Copy the full SHA
    b24822c View commit details
    Browse the repository at this point in the history