Dontaudit screen asking for the sys_tty_config capability
PATCH 1/1 Dontaudit screen asking for the sys_tty_config capability
This avc shows up when using screen as root, however screen seems to work fine without that permission.
--- screen.if | 2 ++ 1 file changed, 2 insertions(+)
screen.if +2 -0
@@ -54,6 +54,8 @@ template(`screen_role_template',` dontaudit $3 $1_screen_t:unix_stream_socket { read write }; allow $1_screen_t $3:process signal; + dontaudit $1_screen_t self:capability sys_tty_config; + allow $3 screen_tmp_t:dir { manage_dir_perms relabel_dir_perms }; allow $3 screen_tmp_t:file { manage_file_perms relabel_file_perms }; allow $3 screen_tmp_t:fifo_file { manage_fifo_file_perms relabel_fifo_file_perms };
Signature · 1 line
1.8.5.5
PATCH 1/1 Dontaudit screen asking for the sys_tty_config capability
Quoted 11 lines · Luis Ressel
This avc shows up when using screen as root, however screen seems to work fine without that permission.
--- screen.if | 2 ++ 1 file changed, 2 insertions(+)screen.if +0
-0
screen.if template(`screen_role_template',` · line 61
Quoted 8 lines
screen.if +2
-0@@ -54,6 +54,8 @@ template(`screen_role_template',` dontaudit $3 $1_screen_t:unix_stream_socket { read write }; allow $1_screen_t $3:process signal; + dontaudit $1_screen_t self:capability sys_tty_config; + allow $3 screen_tmp_t:dir { manage_dir_perms relabel_dir_perms }; allow $3 screen_tmp_t:file { manage_file_perms relabel_file_perms }; allow $3 screen_tmp_t:fifo_file { manage_fifo_file_perms relabel_fifo_file_perms };
Merged.
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com