Skip to content

Commit a15b4cc

Browse files
committed
Allow virtqemud setattr dri devices
Steps to reproduce: 1. Create a vm. 2. Enable 3D acceleration under `Video Virtio`. 3. Enable OpenGL and set Listen type to "None" under `Display Spice`. 4. Start the vm. The commit addresses the following AVC denials: type=AVC msg=audit(1760415907.810:959): avc: denied { open } for pid=8333 comm="rpc-virtqemud" path="/dev/dri/renderD128" dev="tmpfs" ino=10 scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:dri_device_t:s0 tclass=chr_file permissive=1 type=AVC msg=audit(1760415907.810:960): avc: denied { setattr } for pid=8333 comm="rpc-virtqemud" name="renderD128" dev="tmpfs" ino=10 scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:dri_device_t:s0 tclass=chr_file permissive=1 Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2403689
1 parent 732c595 commit a15b4cc

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

policy/modules/contrib/virt.te

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2266,7 +2266,8 @@ dev_delete_urand(virtqemud_t)
22662266
dev_getattr_fs(virtqemud_t)
22672267
dev_read_cpuid(virtqemud_t)
22682268
dev_rw_sysfs(virtqemud_t)
2269-
dev_rw_inherited_dri(virtqemud_t)
2269+
dev_rw_dri(virtqemud_t)
2270+
dev_setattr_dri_dev(virtqemud_t)
22702271
dev_read_urand(virtqemud_t)
22712272
dev_rw_sgx_vepc(virtqemud_t)
22722273
dev_rw_vfio_dev(virtqemud_t)

0 commit comments

Comments
 (0)