tree 72e4eb398756982128a0ad0021d25a09469a1167
parent 7dac1dbf6f5629744e60e58e8c80e83973f790d4
author Stefan Berger <stefanb@linux.ibm.com> 1691791992 -0400
committer Stefan Berger <stefanb@us.ibm.com> 1692109808 -0400

SELinux: Add rules for user_tpm_t:sockfile to allow unlink

With a memoryBacking node added to the libvirt domain XML, the unlink
permission on user_tmp_t:sockfile becomes necessary to avoid an avc
denial.

  <currentMemory unit='KiB'>2097152</currentMemory>
  <memoryBacking>
    <hugepages>
      <page size='2048' unit='KiB'/>
    </hugepages>
  </memoryBacking>

Also add the unlink permission to the other occurrences of sock_file.

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2165142
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>