Skip to content

Commit fe44c01

Browse files
committed
Allow tlp get the attributes of the pidfs filesystem
The commit addresses the following AVC denial: type=AVC msg=audit(1760526474.843:188): avc: denied { getattr } for pid=5843 comm="systemctl" name="/" dev="pidfs" ino=1 scontext=system_u:system_r:tlp_t:s0-s0:c0.c1023 tcontext=system_u:object_r:pidfs_t:s0 tclass=filesystem permissive=0 Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2404140
1 parent 0b3d4bd commit fe44c01

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

policy/modules/contrib/tlp.te

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -64,6 +64,8 @@ files_read_kernel_modules(tlp_t)
6464
files_map_kernel_modules(tlp_t)
6565
files_load_kernel_modules(tlp_t)
6666

67+
fs_getattr_pidfs(tlp_t)
68+
6769
init_status(tlp_t)
6870
init_stream_connectto(tlp_t)
6971

0 commit comments

Comments
 (0)