Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Update bootupd policy for unmounted ESP case
The commit addresses the following AVC denial: type=AVC msg=audit(1725385838.182:370): avc: denied { getattr } for pid=3034 comm="bootupctl" path="/dev/vda1" dev="devtmpfs" ino=311 scontext=system_u:system_r:bootupd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1 type=AVC msg=audit(1725385843.983:373): avc: denied { setfscreate } for pid=3046 comm="cp" scontext=system_u:system_r:bootupd_t:s0 tcontext=system_u:system_r:bootupd_t:s0 tclass=process permissive=1
- Loading branch information