diff options
| author |   Dave Sugar <dsugar@tresys.com> | 2020-10-01 12:19:54 -0400 |
|---|---|---|
| committer |   Jason Zaman <perfinion@gentoo.org> | 2020-10-11 14:14:40 -0700 |
| commit | f08d86da1f32efeee3a182aec308abfd13eeac95 (patch) | |
| tree | 9bdf32a0d6559b1e1d92ed20c9130533c342e00f /policy/modules/services/snmp.te | |
| parent | corecommands, dbus, locallogin, logging, sysnetwork, systemd, udev: Module ve... (diff) | |
| download | hardened-refpolicy-f08d86da1f32efeee3a182aec308abfd13eeac95.tar.gz hardened-refpolicy-f08d86da1f32efeee3a182aec308abfd13eeac95.tar.bz2 hardened-refpolicy-f08d86da1f32efeee3a182aec308abfd13eeac95.zip | |
Allow snmpd to read hwdata
Oct 1 16:11:49 localhost audispd: node=virtual type=AVC msg=audit(1601568708.950:2198): avc: denied { getattr } for pid=4114 comm="snmpd" path="/usr/share/hwdata/pci.ids" dev="dm-0" ino=76435 scontext=system_u:system_r:snmpd_t:s0 tcontext=system_u:object_r:hwdata_t:s0 tclass=file permissive=1
Oct 1 16:11:49 localhost audispd: node=virtual type=AVC msg=audit(1601568708.950:2197): avc: denied { read } for pid=4114 comm="snmpd" name="pci.ids" dev="dm-0" ino=76435 scontext=system_u:system_r:snmpd_t:s0 tcontext=system_u:object_r:hwdata_t:s0 tclass=file permissive=1
Oct 1 16:11:49 localhost audispd: node=virtual type=AVC msg=audit(1601568708.950:2197): avc: denied { open } for pid=4114 comm="snmpd" path="/usr/share/hwdata/pci.ids" dev="dm-0" ino=76435 scontext=system_u:system_r:snmpd_t:s0 tcontext=system_u:object_r:hwdata_t:s0 tclass=file permissive=1
Signed-off-by: Dave Sugar <dsugar@tresys.com>
Signed-off-by: Jason Zaman <perfinion@gentoo.org>
Diffstat (limited to 'policy/modules/services/snmp.te')
| -rw-r--r-- | policy/modules/services/snmp.te | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/policy/modules/services/snmp.te b/policy/modules/services/snmp.te index 97c457e2..c61721c5 100644 --- a/policy/modules/services/snmp.te +++ b/policy/modules/services/snmp.te @@ -108,6 +108,7 @@ init_dontaudit_write_utmp(snmpd_t) logging_send_syslog_msg(snmpd_t) +miscfiles_read_hwdata(snmpd_t) miscfiles_read_localization(snmpd_t) seutil_dontaudit_search_config(snmpd_t) |