From d5b75d954771da98c36fb7af90e24a14fb01c184 Mon Sep 17 00:00:00 2001
From: Zdenek Pytela <zpytela@redhat.com>
Date: Mon, 31 Jan 2022 12:47:23 +0100
Subject: [PATCH] Allow alsactl set group Process ID of a process

Reference: https://gitbub.com/fedora-selinux/selinux-policy/commit/d5b75d954771da98c36fb7af90e24a14fb01c184
Conflict: NA

Addresses the following AVC denial:
type=AVC msg=audit(1624169904.74:1152): avc:  denied  { setpgid } for  pid=115535 comm="alsactl" scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:system_r:alsa_t:s0 tclass=process permissive=0

Resolves: rhbz#1974051
Signed-off-by: lujie54 <lujie54@huawei.com>
---
 policy/modules/contrib/alsa.te | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/policy/modules/contrib/alsa.te b/policy/modules/contrib/alsa.te
index 97f3815..aee9fe8 100644
--- a/policy/modules/contrib/alsa.te
+++ b/policy/modules/contrib/alsa.te
@@ -43,7 +43,7 @@ systemd_unit_file(alsa_unit_file_t)
 
 allow alsa_t self:capability { dac_read_search  setgid setuid ipc_owner sys_nice };
 dontaudit alsa_t self:capability { sys_tty_config sys_admin };
-allow alsa_t self:process { getsched setsched signal_perms };
+allow alsa_t self:process { getsched setpgid setsched signal_perms };
 allow alsa_t self:sem create_sem_perms;
 allow alsa_t self:shm create_shm_perms;
 allow alsa_t self:unix_stream_socket { accept listen };
-- 
1.8.3.1