From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-9.0 required=3.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS,INCLUDES_PATCH,MAILING_LIST_MULTI, SIGNED_OFF_BY,SPF_PASS,URIBL_BLOCKED,USER_AGENT_GIT autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 28686C43381 for ; Mon, 25 Feb 2019 23:38:05 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id E9492218D3 for ; Mon, 25 Feb 2019 23:38:04 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (1024-bit key) header.d=tresys.onmicrosoft.com header.i=@tresys.onmicrosoft.com header.b="BGQxMgYJ" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726971AbfBYXiE (ORCPT ); Mon, 25 Feb 2019 18:38:04 -0500 Received: from mail-eopbgr790104.outbound.protection.outlook.com ([40.107.79.104]:63568 "EHLO NAM03-CO1-obe.outbound.protection.outlook.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1726974AbfBYXiE (ORCPT ); Mon, 25 Feb 2019 18:38:04 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tresys.onmicrosoft.com; s=selector1-tresys-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=iZDFF5T6SqF08xjiTVJV+GkRLjWVeVDp1WhuVsCuB8I=; b=BGQxMgYJt+M8makSrM7LqfGQXb+DHSa/x7M7al0zbH/V6+7ReUE0q5LX/xyYNCj4+0fPZIfJUChwUfGblzP/vDbBbLP/yacg7Z0bi0626QLTSckT9paGVHjsVbIgZyVQor3ET0nS5shqQymfP4zlUY7qvnjRflIEfysltjH4p/Q= Received: from BN6PR15MB1507.namprd15.prod.outlook.com (10.172.151.147) by BN6PR15MB1843.namprd15.prod.outlook.com (10.174.113.141) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1643.16; Mon, 25 Feb 2019 23:37:47 +0000 Received: from BN6PR15MB1507.namprd15.prod.outlook.com ([fe80::f1c7:33d:34ac:bdce]) by BN6PR15MB1507.namprd15.prod.outlook.com ([fe80::f1c7:33d:34ac:bdce%3]) with mapi id 15.20.1643.019; Mon, 25 Feb 2019 23:37:47 +0000 From: "Sugar, David" To: "selinux-refpolicy@vger.kernel.org" Subject: [PATCH] Allow AIDE to sendto kernel datagram socket Thread-Topic: [PATCH] Allow AIDE to sendto kernel datagram socket Thread-Index: AQHUzWMcKzHmJADEcUexg06Ika6nOQ== Date: Mon, 25 Feb 2019 23:37:46 +0000 Message-ID: <20190225233708.15319-4-dsugar@tresys.com> References: <20190225233708.15319-1-dsugar@tresys.com> In-Reply-To: <20190225233708.15319-1-dsugar@tresys.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [73.180.141.176] x-clientproxiedby: BN6PR1401CA0006.namprd14.prod.outlook.com (2603:10b6:405:4b::16) To BN6PR15MB1507.namprd15.prod.outlook.com (2603:10b6:404:c6::19) authentication-results: spf=none (sender IP is ) smtp.mailfrom=dsugar@tresys.com; x-ms-exchange-messagesentrepresentingtype: 1 x-mailer: git-send-email 2.20.1 x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 60abbc3e-a487-4d8f-fd5b-08d69b7a3eb1 x-microsoft-antispam: BCL:0;PCL:0;RULEID:(2390118)(7020095)(4652040)(7021145)(8989299)(4534185)(7022145)(4603075)(4627221)(201702281549075)(8990200)(7048125)(7024125)(7027125)(7023125)(5600127)(711020)(4605104)(2017052603328)(7153060)(7193020);SRVR:BN6PR15MB1843; x-ms-traffictypediagnostic: BN6PR15MB1843: x-microsoft-exchange-diagnostics: =?iso-8859-1?Q?1;BN6PR15MB1843;23:4qnoWdssw53ZfYBon6mi4T7WzP1cRN6l8n7ykxu?= =?iso-8859-1?Q?t0Oacr/4ktnc5vecfLEFdotLMOrqGsKZOGPtlh4WEfMeAWBxIrDJL3+ztw?= =?iso-8859-1?Q?gPu/A82kJfLEq/a1gH45wl6Y004EXxkPn5GjoiDn0ph0qXbVmhEEzjiSfT?= =?iso-8859-1?Q?7tM+YWb48eMJEIPQbbqPdtofdFfRpSxMnMW/C1fBtnNroC23+sDhv7hOad?= =?iso-8859-1?Q?U9kUQymm9VKpEX2rd0PWRXRYFQOGLehaMdUKi4T5StcgKUBRqHX15tDXF3?= =?iso-8859-1?Q?rYoFca7BdD6LkSeBk/DPsjs8m5pGtauArvqEk0XfLtI4mN9X4rZu5WESAt?= =?iso-8859-1?Q?J9DpAwerYdHJy4CUkwxgCVst6zzle4FeicicXTSzKmquQIYQRMDZueOhBN?= =?iso-8859-1?Q?k0ygOmhovVFWY594oqMMYUtzQIoKbG5wbgHLIbXEhdBny7weZiz9tG0Sv4?= =?iso-8859-1?Q?zp/EfmOrZBO4RMbFiEjR3xTiSV1U9/SnbDMiavJh7XOs/9C7sv4bhzscmQ?= =?iso-8859-1?Q?ZTfhe2gYq44kcj2IeO1L945V/PW25QOvJyMODJG4AevLKYXRmlkBXt7Soq?= =?iso-8859-1?Q?lEScSfCJ3vABF0VJnsUsJqRiWwQF1GgD01EcZeN6ZV7JyT+5L/aWjszvPD?= =?iso-8859-1?Q?FkB3M29Kk/rABD44ytGvFEIOOuZFBdnJ/ltRAVwP4OtcyG+B1Cemo8R4Uf?= =?iso-8859-1?Q?7uPTmSZjx6MLpbINmede2nTGdV+cng7qM8W5roXIt8GD3Nisba4RIBgw24?= =?iso-8859-1?Q?B7eF18VxLaX+oyjXaoKg/6oNAe+UwLlrEX9XbvgwQSCeVGHDy0rMX3wLCm?= =?iso-8859-1?Q?vlbjGjcQgHHUyHxcj8WICHT2BTc2Uu0b343RsyJjtJ75CV5SMbPXt0yHBJ?= =?iso-8859-1?Q?66j9qiL7nlThh9Rl7yp70DspC0CtEXTZ4S6THdUhl5mxjU8SAtyWw4fsUg?= =?iso-8859-1?Q?5vaPaLH8mqKCDWExIt1Voa1pcPNk/jm6fOn5seWVQjJ2ZoweG7Lxbhc/oz?= =?iso-8859-1?Q?kBLvTVYmABUJ6qL1QlZ6HD9OOaNZvB2c7bzfuO59J0KGt9oFTRpoqUGXcS?= =?iso-8859-1?Q?YicNQrpgSkjiRdWhqsLznz5/o6zn2snYo51BDz/o/3ruXSUV8DsPl3gbKj?= =?iso-8859-1?Q?DWRFxzbb9bulCQGCOKfREDGFSoQOkJTqLzym7nimmdFYfzVfmM1SjVZRef?= =?iso-8859-1?Q?spy2RZOy4rCF/OybeDN7dCVGpru0F00RHP4ODMBWywLHVc8GBzlfFo5FTZ?= =?iso-8859-1?Q?Enzyu2EEmS9gLDTENeW4U4qhjiSL61+CDHS06N8K2pZuog1heRxGGhCpvp?= =?iso-8859-1?Q?Ls=3D?= x-microsoft-antispam-prvs: x-forefront-prvs: 095972DF2F x-forefront-antispam-report: SFV:NSPM;SFS:(10019020)(136003)(366004)(376002)(396003)(39830400003)(346002)(189003)(199004)(81166006)(316002)(8676002)(2351001)(66066001)(106356001)(71200400001)(71190400001)(25786009)(76176011)(68736007)(1076003)(14454004)(5660300002)(6916009)(81156014)(4744005)(3846002)(52116002)(8936002)(99286004)(50226002)(256004)(6116002)(36756003)(6512007)(446003)(11346002)(97736004)(7736002)(486006)(2616005)(186003)(305945005)(6436002)(86362001)(6486002)(5640700003)(105586002)(53936002)(508600001)(2906002)(26005)(386003)(2501003)(476003)(6506007)(102836004);DIR:OUT;SFP:1102;SCL:1;SRVR:BN6PR15MB1843;H:BN6PR15MB1507.namprd15.prod.outlook.com;FPR:;SPF:None;LANG:en;PTR:InfoNoRecords;MX:1;A:1; received-spf: None (protection.outlook.com: tresys.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: jSQkIzq8aB0CvlxAa94PVToYqyZ0j1veKgU4ZCjr9FzDTzzR4Lti7iZLaREEnehYhi/U2OiiUq2D7o3qSTOEFCLJo6Dp7qFMGoyY0+B4TKBCM6D7pJqnd5suIOzBEacQ1zXgIIvpuq4vUFq6x0GJ6rVnFUzOB+yC4H4IxsQ1ePSy/zk8zfHAtckzSag7RltBkmhAWktBI1EYxTvjwU+rt61YmxUQInpZEeViouA0tyv1M7Vr6xd8gP6qNHZBTpjYuI3Y33E60zBNKrVgzvpIQWzxnJ4VSPO+RvuzTNyxi6qg9dlCxZtGPcv2U4WYCVB08QIbZNvavCJW552FK2cA12PH76Pl/E84GZ13Ol15duIEJBBkaqPYDGca1mZCLNA+zWFGRSd2zSTbeem2lJ/elklJAFrCOXmGT73nk8I8Prw= Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: tresys.com X-MS-Exchange-CrossTenant-Network-Message-Id: 60abbc3e-a487-4d8f-fd5b-08d69b7a3eb1 X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Feb 2019 23:37:45.9030 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-id: a0d45667-6c07-4e88-868f-4ac9af95c7ed X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR15MB1843 Sender: selinux-refpolicy-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: selinux-refpolicy@vger.kernel.org type=3DAVC msg=3Daudit(1550799594.394:205): avc: denied { sendto } for p= id=3D7182 comm=3D"aide" path=3D"/dev/log" scontext=3Dsystem_u:system_r:aide= _t:s0 tcontext=3Dsystem_u:system_r:kernel_t:s0 tclass=3Dunix_dgram_socket p= ermissive=3D1 Signed-off-by: Dave Sugar --- policy/modules/admin/aide.te | 2 ++ 1 file changed, 2 insertions(+) diff --git a/policy/modules/admin/aide.te b/policy/modules/admin/aide.te index 9d3c19ce..6297b60e 100644 --- a/policy/modules/admin/aide.te +++ b/policy/modules/admin/aide.te @@ -35,6 +35,8 @@ logging_log_filetrans(aide_t, aide_log_t, file) files_read_all_files(aide_t) files_read_all_symlinks(aide_t) =20 +kernel_dgram_send(aide_t) + logging_send_audit_msgs(aide_t) logging_send_syslog_msg(aide_t) =20 --=20 2.20.1