Files
snapd/data
Maciej Borzecki 22633cbe9b data/selinux: allow poking /proc/xen
When running in a Xen guest, systemd-detect-virt when invoked by snapd may
trigger the following denial:

type=PROCTITLE msg=audit(1640771959.147:236972): proctitle="systemd-detect-virt"
type=AVC msg=audit(1640771959.147:236972): avc:  denied  { search } for pid=21113
         comm="systemd-detect-" name="xen" dev="proc"
         ino=4026532003
         scontext=system_u:system_r:snappy_t:s0
         tcontext=system_u:object_r:proc_xen_t:s0
         tclass=dir permissive=1

See https://forum.snapcraft.io/t/snapd-unavailable-red-hat-enterprise-linux/28004/15
for details.

Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>
2022-01-03 15:57:58 +01:00
..
2018-02-22 17:37:57 +01:00