Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

rtkit can't setsched on spc_t container processes #2501

Open
RoyalOughtness opened this issue Dec 24, 2024 · 3 comments
Open

rtkit can't setsched on spc_t container processes #2501

RoyalOughtness opened this issue Dec 24, 2024 · 3 comments

Comments

@RoyalOughtness
Copy link

#============= rtkit_daemon_t ==============
allow rtkit_daemon_t spc_t:process setsched;

Unsure if this needs to be here or on container-selinux

@rhatdan
Copy link
Contributor

rhatdan commented Jan 2, 2025

I think
allow rtkit_daemon_t unconfined_t:process { getattr setsched };

Should be changed to

allow rtkit_daemon_t unconfined_domain:process { getattr setsched };

@RoyalOughtness
Copy link
Author

@rhatdan do you mind linking to the specific line you're referring to? Can't find this line or anything similar in this repo:

allow rtkit_daemon_t unconfined_t:process { getattr setsched };

@rhatdan
Copy link
Contributor

rhatdan commented Jan 14, 2025

I found this with a sesearch command.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants