[Bugs] [Bug 1312809] [SELinux]: Found avc of type=USER_AVC for class dbus during glusterfs-ganesha validation

[bugzilla at redhat.com]

https://bugzilla.redhat.com/show_bug.cgi?id=1312809



--- Comment #2 from Milos Malik <mmalik at redhat.com> ---
Here is a workaround, which works in enforcing mode:

# setenforce 1
# cat bz1312809.te 
policy_module(bz1312809,1.0)

require {
  type glusterd_t;
  type initrc_t;
  class dbus { send_msg };
}

allow glusterd_t initrc_t:dbus send_msg;

# make -f /usr/share/selinux/devel/Makefile
Compiling targeted bz1312809 module
/usr/bin/checkmodule:  loading policy configuration from tmp/bz1312809.tmp
/usr/bin/checkmodule:  policy configuration loaded
/usr/bin/checkmodule:  writing binary representation (version 10) to
tmp/bz1312809.mod
Creating targeted bz1312809.pp policy package
# semodule -i bz1312809.pp 
# 

The /usr/share/selinux/devel/Makefile file comes from selinux-policy-devel
package.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=IW7yUdwo6l&a=cc_unsubscribe