Skip to content

Commit

Permalink
Dontaudit rhsmcertd write memory device
Browse files Browse the repository at this point in the history 
Do not audit attempts to write to raw memory devices

lscpu uses  O_RDONLY to read /dev/mem,
but on ppc64 it uses IBM's librtas.so that mmap /dev/mem using O_RDRW for open().

Resolves: RHEL-1547
  • Loading branch information
@5umm3r15 @zpytela
5umm3r15 authored and zpytela committed Sep 25, 2023
1 parent 519f177 commit 76f54f9
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions policy/modules/contrib/rhsmcertd.te
View file
Original file line number Diff line number Diff line change
Expand Up @@ -93,6 +93,7 @@ corenet_tcp_connect_websm_port(rhsmcertd_t)
corecmd_exec_bin(rhsmcertd_t)
corecmd_exec_shell(rhsmcertd_t)

dev_dontaudit_write_raw_memory(rhsmcertd_t)
dev_read_sysfs(rhsmcertd_t)
dev_read_rand(rhsmcertd_t)
dev_read_urand(rhsmcertd_t)
Expand Down

0 comments on commit 76f54f9

Please sign in to comment.