File 1239593-hyperv_uio.diff of Package selinux-policy
commit 0aed4ddf1c5593784fed6a3bb4e450964cbf28a1
Author: Robert Frohl <rfrohl@suse.com>
Date: Tue Apr 1 14:35:42 2025 +0200
Allow hyper-v's fcopy_uio_daemon to run as unconfined_service_t
diff --git a/policy/modules/contrib/hypervkvp.fc b/policy/modules/contrib/hypervkvp.fc
index 895d62ad9..8ee36bf4b 100644
--- a/policy/modules/contrib/hypervkvp.fc
+++ b/policy/modules/contrib/hypervkvp.fc
@@ -9,4 +9,6 @@
/usr/bin/hypervvssd -- gen_context(system_u:object_r:hypervvssd_exec_t,s0)
/usr/lib/hyper-v/bin/.*vss_daemon -- gen_context(system_u:object_r:hypervvssd_exec_t,s0)
+/usr/lib/hyper-v/bin/.*fcopy_uio_daemon -- gen_context(system_u:object_r:bin_t,s0)
+
/var/lib/hyperv(/.*)? gen_context(system_u:object_r:hypervkvp_var_lib_t,s0)