Re: systemd and dontaudit

On 7/22/2025 8:15 PM, Russell Coker wrote:
> kernel_dontaudit_getattr_proc(systemd_logind_t)
> 
> The above hides the fact that systemd-logind wants to statfs /proc and that
> can cause it to abort in some situations, to refuse to respond to dbus
> requests, and to delay all logins by 25 seconds.

Can you elaborate on what one of those failing situations is?


> https://github.com/SELinuxProject/refpolicy/pull/995
> 
> I fixed it in this PR, but I think that perhaps we should allow all systemd
> processes to statfs /proc to avoid future problems.

I'd be fine with this, especially since it's not an overly concerning 
access.


-- 
Chris PeBenito