diff options
| author | Janne Grunau <janne-psst@jannau.net> | 2025-05-01 11:54:07 +0200 |
|---|---|---|
| committer | Stefano Brivio <sbrivio@redhat.com> | 2025-05-02 12:00:51 +0200 |
| commit | 93394f4ef0966602b2ada8f72beaf75352add7b1 (patch) | |
| tree | cf128412a66c6fffaae057a74036c1ba9cf155c2 /doc | |
| parent | 11be695f5c0a6a7d74e9628e9863e665f59d511f (diff) | |
| download | passt-93394f4ef0966602b2ada8f72beaf75352add7b1.tar passt-93394f4ef0966602b2ada8f72beaf75352add7b1.tar.gz passt-93394f4ef0966602b2ada8f72beaf75352add7b1.tar.bz2 passt-93394f4ef0966602b2ada8f72beaf75352add7b1.tar.lz passt-93394f4ef0966602b2ada8f72beaf75352add7b1.tar.xz passt-93394f4ef0966602b2ada8f72beaf75352add7b1.tar.zst passt-93394f4ef0966602b2ada8f72beaf75352add7b1.zip | |
selinux: Add getattr to class udp_socket
Commit 59cc89f ("udp, udp_flow: Track our specific address on socket
interfaces") added a getsockname() call in udp_flow_new(). This requires
getattr. Fixes "Flow 0 (UDP flow): Unable to determine local address:
Permission denied" errors in muvm/passt on Fedora Linux 42 with SELinux.
The SELinux audit message is
| type=AVC msg=audit(1746083799.606:235): avc: denied { getattr } for
| pid=2961 comm="passt" laddr=127.0.0.1 lport=49221
| faddr=127.0.0.53 fport=53
| scontext=unconfined_u:unconfined_r:passt_t:s0-s0:c0.c1023
| tcontext=unconfined_u:unconfined_r:passt_t:s0-s0:c0.c1023
| tclass=udp_socket permissive=0
Fixes: 59cc89f4cc01 ("udp, udp_flow: Track our specific address on socket interfaces")
Link: https://bugzilla.redhat.com/show_bug.cgi?id=2363238
Signed-off-by: Janne Grunau <janne-psst@jannau.net>
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
Diffstat (limited to 'doc')
0 files changed, 0 insertions, 0 deletions