Skip to content

Commit acb06f0

Browse files
committed
Allow getattr on all filesystems
Fixes: type=AVC msg=audit(05/05/26 08:52:26.030:2162) : avc: denied { getattr } for pid=77209 comm=fapolicyd name=/ dev="tmpfs" ino=1 scontext=system_u:system_r:fapolicyd_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=0 type=AVC msg=audit(05/05/26 08:52:26.030:2164) : avc: denied { getattr } for pid=77209 comm=fapolicyd name=/ dev="xvda2" ino=1 scontext=system_u:system_r:fapolicyd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=filesystem permissive=0 Signed-off-by: Petr Lautrbach <lautrbach@redhat.com>
1 parent 4c27260 commit acb06f0

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

fapolicyd.te

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -86,7 +86,7 @@ domain_read_all_domains_state(fapolicyd_t)
8686
files_mmap_all_files(fapolicyd_t)
8787
files_read_all_files(fapolicyd_t)
8888

89-
fs_getattr_xattr_fs(fapolicyd_t)
89+
fs_getattr_all_fs(fapolicyd_t)
9090
fs_rw_inherited_tmpfs_files(fapolicyd_t)
9191

9292
logging_send_syslog_msg(fapolicyd_t)

0 commit comments

Comments
 (0)