mirror-cockpit-project-cockpit/selinux
Jelle van der Waa e204cd130c selinux: allow cockpit-ws to get attributes of pidfs
Addresses the following AVC denial introduced by systemd 260:
avc:  denied  { getattr } for  pid=16530 comm="cockpit-ws" name="/" dev="pidfs" ino=1 scontext=system_u:system_r:cockpit_ws_t:s0 tcontext=system_u:object_r:pidfs_t:s0 tclass=filesystem permissive=0

systemd 260 refactored internal code to use pidfs in most places which
is the likely cause of the new violation.

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2449605
2026-03-23 20:41:30 +01:00
..
cockpit.fc systemd, tools: Rename cockpit-motd to cockpit-issue 2024-12-09 15:30:09 +01:00
cockpit.if Add custom selinux policy 2021-04-23 14:12:38 +02:00
cockpit.te selinux: allow cockpit-ws to get attributes of pidfs 2026-03-23 20:41:30 +01:00
cockpit_session_selinux.8cockpit ssh: Drop cockpit-ssh 2024-09-30 09:36:34 +02:00
cockpit_ws_selinux.8cockpit selinux: Move update-motd out of cockpit_ws_t 2024-11-26 17:28:49 +01:00
HACKING.md selinux: Document how to quickly iterate policy changes 2023-09-29 17:06:44 +02:00
Makefile.am selinux: remove another mid-body conditional 2022-03-10 00:11:14 +01:00