systemd and dontaudit

Russell Coker <[email protected]> Wed, 23 Jul 2025 10:15:24 +1000
Newsgroups org.kernel.vger.selinux-refpolicy
Message-ID <13022276.O9o76ZdvQC@xev>
kernel_dontaudit_getattr_proc(systemd_logind_t)

The above hides the fact that systemd-logind wants to statfs /proc and that 
can cause it to abort in some situations, to refuse to respond to dbus 
requests, and to delay all logins by 25 seconds.

https://github.com/SELinuxProject/refpolicy/pull/995

I fixed it in this PR, but I think that perhaps we should allow all systemd 
processes to statfs /proc to avoid future problems.

-- 
My Main Blog         http://etbe.coker.com.au/
My Documents Blog    http://doc.coker.com.au/