Allow init_t nnp domain transition to abrtd_t · Pull Request !252 · src-openEuler/selinux-policy

abrt升级到2.17.2后引入NoNewPrivileges=yes参数导致服务启动失败
失败日志：
```
Aug 13 23:41:18 localhost.localdomain abrtd[33624]: Can't open '/var/run/abrt/abrtd.pid': Permission denied
Aug 13 23:41:18 localhost.localdomain abrtd[33624]: Error while initializing daemon
Aug 13 23:41:18 localhost.localdomain systemd[1]: abrtd.service: Main process exited, code=exited, status=1/FAILURE

```

audit日志如下
```
type=AVC msg=audit(1723474098.925:17): avc:  denied  { nnp_transition } for  pid=928 comm="(abrtd)" scontext=system_u:system_r:init_t:s0 tcontext=system_u:system_r:abrt_t:s0-s0:c0.c1023 tclass=process2 permissive=0
type=AVC msg=audit(1723474098.965:19): avc:  denied  { create } for  pid=928 comm="abrtd" name="abrtd.pid" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:abrt_var_run_t:s0 tclass=file permissive=0

```

关联issue：https://gitee.com/src-openeuler/abrt/issues/IAIRGG?from=project-issue

上游社区提交：https://github.com/fedora-selinux/selinux-policy/commit/b9090951b8dc65f9e4bcf008aff9d353dd025f0a

src-openEuler/selinux-policy .gitee-modal { width: 500px !important; }

搜索帮助

src-openEuler/selinux-policy