dustin
/
configpolicy
1
1
Fork 0
Code Issues Releases Activity

burp1.p.b: Set collectd SELinux domain permissive 

Using the *md* plugin generates AVC denials like this:

	type=AVC msg=audit(1681259123.636:338441): avc:  denied  { read } for  pid=1438759 comm="collectd" name="md1" dev="devtmpfs" ino=646 scontext=system_u:system_r:collectd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=0
btop
Dustin 2023-04-11 19:24:02 -05:00
parent f16c2fae2f
commit 9921b2fd5e
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
host_vars/burp1.pyrocufflink.blue.yml
View File

@ -1,3 +1,8 @@
collectd_plugins: collectd_plugins:
md: true md: true
thermal: true thermal: true
# collectd generates a bunch of AVC denials on Fedora 36. We'll mark
# its domain permissive until the problems are identified and resolved
# upstream.
collectd_selinux_permissive: true