Skip to content

Commit

Permalink
Allow rasdaemon write access to sysfs
Browse files Browse the repository at this point in the history
Error message in rasdaemon:
Aug 23 09:38:48 localhost rasdaemon[17117]: rasdaemon: Kernel does not support page offline interface

Fixes:
----
time->Fri Aug 23 09:38:48 2024
type=AVC msg=audit(1724398728.627:998): avc:  denied  { write } for  pid=17117 comm="rasdaemon" name="soft_offline_page" dev="sysfs" ino=46 scontext=system_u:system_r:rasdaemon_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=0

Signed-off-by: Cathy Hu <cahu@suse.de>
  • Loading branch information
ca-hu committed Aug 23, 2024
1 parent 137c143 commit 23f4b75
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion policy/modules/contrib/rasdaemon.te
Original file line number Diff line number Diff line change
Expand Up @@ -31,9 +31,9 @@ kernel_read_system_state(rasdaemon_t)
kernel_manage_debugfs(rasdaemon_t)

dev_read_raw_memory(rasdaemon_t)
dev_read_sysfs(rasdaemon_t)
dev_read_urand(rasdaemon_t)
dev_rw_cpu_microcode(rasdaemon_t)
dev_rw_sysfs(rasdaemon_t)

corecmd_exec_bin(rasdaemon_t)

Expand Down

0 comments on commit 23f4b75

Please sign in to comment.