selinux/spacewalk-monitoring-selinux/spacewalk-monitoring.te | 2 ++
1 file changed, 2 insertions(+)
New commits:
commit 36a6b27d2071c0ab1bb87ecd0b00c00e130841b6
Author: Jan Pazdziora <jpazdziora(a)redhat.com>
Date: Mon Aug 10 17:00:15 2009 +0200
516073 - allow monitoring to setpgid self.
Addressing:
type=AVC msg=audit(1249571377.161:25): avc: denied { setpgid } for pid=2197
comm="gogo.pl" scontext=system_u:system_r:spacewalk_monitoring_t:s0
tcontext=system_u:system_r:spacewalk_monitoring_t:s0 tclass=process
(cherry picked from commit 08972b855f53289a9ff28541bf72948145b0242b)
diff --git a/selinux/spacewalk-monitoring-selinux/spacewalk-monitoring.te
b/selinux/spacewalk-monitoring-selinux/spacewalk-monitoring.te
index 483b668..6de55fd 100644
--- a/selinux/spacewalk-monitoring-selinux/spacewalk-monitoring.te
+++ b/selinux/spacewalk-monitoring-selinux/spacewalk-monitoring.te
@@ -160,3 +160,5 @@ corenet_tcp_bind_all_nodes(spacewalk_monitoring_t)
corenet_udp_bind_all_nodes(spacewalk_monitoring_t)
corenet_tcp_connect_ftp_port(spacewalk_monitoring_t)
+
+allow spacewalk_monitoring_t self:process setpgid;
Show replies by date