Skip to content

Commit

Permalink
Allow samba use the io_uring API
Browse files Browse the repository at this point in the history
The commit addresses the following AVC denial example:
type=AVC msg=audit(08/25/2024 22:56:47.375:253) : avc:  denied  { create } for  pid=1244 comm=smbd[127.0.0.1] anonclass=[io_uring] scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:io_uring_t:s0 tclass=anon_inode permissive=1

Resolves: rhbz#2307812
  • Loading branch information
zpytela committed Sep 2, 2024
1 parent 3e53e58 commit ca401bb
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions policy/modules/contrib/samba.te
Original file line number Diff line number Diff line change
Expand Up @@ -391,6 +391,7 @@ allow smbd_t winbind_t:process { signal signull };

kernel_getattr_core_if(smbd_t)
kernel_getattr_message_if(smbd_t)
kernel_io_uring_use(smbd_t)
kernel_read_network_state(smbd_t)
kernel_read_net_sysctls(smbd_t)
kernel_read_fs_sysctls(smbd_t)
Expand Down

0 comments on commit ca401bb

Please sign in to comment.