when loading the policy I see a message Permission cmd in cl

Fixed in <a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https

git log: commit <a class="commit-link" data-hovercard-type="commit" data-hovercard

[Q] Permission cmd in class io_uring not defined in policy. about refpolicy HOT 3 CLOSED

freedom1b2830 commented on September 23, 2024

[Q] Permission cmd in class io_uring not defined in policy.

from refpolicy.

Comments (3)

pebenito commented on September 23, 2024

Fixed in 9193208.

from refpolicy.

freedom1b2830 commented on September 23, 2024

git log:
commit 044e318 (HEAD -> main, origin/main)
Merge: 4b1ba3c 65eed16
Author: Chris PeBenito [email protected]
Date: Wed Nov 29 09:43:44 2023 -0500

Merge pull request #738 from ffontaine/main

policy/modules/services/smartmon.te: make fstools optional

journal:

дек 01 00:03:22 archlinux kernel: SELinux:  Permission cmd in class io_uring not defined in policy.
дек 01 00:03:22 archlinux kernel: SELinux: the above unknown classes and permissions will be denied
дек 01 00:03:22 archlinux kernel: SELinux:  Converting 559 SID table entries...
дек 01 00:03:22 archlinux kernel: SELinux:  policy capability network_peer_controls=1
дек 01 00:03:22 archlinux kernel: SELinux:  policy capability open_perms=1
дек 01 00:03:22 archlinux kernel: SELinux:  policy capability extended_socket_class=1
дек 01 00:03:22 archlinux kernel: SELinux:  policy capability always_check_network=0
дек 01 00:03:22 archlinux kernel: SELinux:  policy capability cgroup_seclabel=1
дек 01 00:03:22 archlinux kernel: SELinux:  policy capability nnp_nosuid_transition=1
дек 01 00:03:22 archlinux kernel: SELinux:  policy capability genfs_seclabel_symlinks=0
дек 01 00:03:22 archlinux kernel: SELinux:  policy capability ioctl_skip_cloexec=0

from refpolicy.

freedom1b2830 commented on September 23, 2024

see https://github.com/SELinuxProject/refpolicy/blob/9193208a43329e1a62ac81e7f94eccfae2a0274a/policy/flask/access_vectors
class io_uring
{
// There is no cmd here
override_creds
sqpoll
}

from refpolicy.

Recommend Projects