selinux-refpolicy/policy/modules/roles/logadm.te

policy_module(logadm, 1.1.0)

########################################
#
# Declarations
#

role logadm_r;

userdom_base_user_template(logadm)

########################################
#
# logadmin local policy
#

allow logadm_t self:capability { dac_override dac_read_search kill sys_nice sys_ptrace };

logging_admin(logadm_t, logadm_r)

optional_policy(`
	dbus_role_template(logadm, logadm_r, logadm_t)
')
Bump module versions for release. Signed-off-by: Chris PeBenito <pebenito@ieee.org> 2021-09-08 14:53:44 +00:00			`policy_module(logadm, 1.1.0)`
trunk: 6 patches from dan. 2009-03-19 17:56:10 +00:00
			`########################################`
			`#`
			`# Declarations`
			`#`

			`role logadm_r;`

			`userdom_base_user_template(logadm)`

			`########################################`
			`#`
			`# logadmin local policy`
			`#`

Sort capabilities permissions from Russell Coker. 2017-02-15 23:47:33 +00:00			`allow logadm_t self:capability { dac_override dac_read_search kill sys_nice sys_ptrace };`
trunk: 6 patches from dan. 2009-03-19 17:56:10 +00:00
			`logging_admin(logadm_t, logadm_r)`
various: systemd user fixes and additional support This finishes up a lot of the work originally started on systemd --user support including interacting with user units, communicating with the user's systemd instance, and reading the system journal. Signed-off-by: Kenton Groombridge <me@concord.sh> 2021-03-13 23:22:59 +00:00
			optional_policy(`
			`dbus_role_template(logadm, logadm_r, logadm_t)`
			`')`