selinux

[idarlund]

documentation was lacking information on security context to binary which resulted SELinux based distros to deny execution trough service. I've added documentation how to fix this without turning SELinux off.

Closes #3700

[izanbard]

Nice work

[idarlund]

Just to add some more context to this PR. This is the log message you'll see in the audit log if security context on the binary is not set correctly:

type=AVC msg=audit(1724228637.075:372): avc: denied { execute } for pid=36219 comm="(mediamtx)" name="mediamtx" dev="dm-0" ino=135307595 scontext=system_u:system_r:init_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=0

[aler9]

merged, thanks

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 55.87%. Comparing base (3700d5e) to head (592a292).
Report is 57 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #3673      +/-   ##
==========================================
- Coverage   57.03%   55.87%   -1.16%     
==========================================
  Files         191      194       +3     
  Lines       19273    19557     +284     
==========================================
- Hits        10992    10928      -64     
- Misses       7445     7792     +347     
- Partials      836      837       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[github-actions]

This issue is mentioned in release v1.9.2 🚀
Check out the entire changelog by clicking here