RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
selinux-refpolicy/policy/modules/services/ulogd.fc

15 lines
562 B
Plaintext
Raw Normal View History

Re-add policy modules from old refpolicy-contrib submodule.
2018-06-23 13:00:56 +00:00
/etc/ulogd\.conf -- gen_context(system_u:object_r:ulogd_etc_t,s0)
/etc/rc\.d/init\.d/ulogd -- gen_context(system_u:object_r:ulogd_initrc_exec_t,s0)
ulogd: allow starting on a Debian system When ulogd is run by systemd on Debian, it logs messages to the journal, it used a PID file in /run/ulog/ulogd.pid, and logs packets to /var/log/ulog/syslogemu.log. This last ones triggers a dac_read_search capability check because the directory is configured as: drwxrwx---. ulog adm /var/log/ulog (root does not have an access to the directory without bypassing the DAC.) Add a comment describing how to avoid allowing dac_read_search to ulogd_t. Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>
2019-08-17 14:03:39 +00:00
/run/ulog(/*) gen_context(system_u:object_r:ulogd_var_run_t,s0)
Re-add policy modules from old refpolicy-contrib submodule.
2018-06-23 13:00:56 +00:00
/usr/bin/ulogd -- gen_context(system_u:object_r:ulogd_exec_t,s0)
/usr/lib/ulogd(/.*)? gen_context(system_u:object_r:ulogd_modules_t,s0)
/usr/sbin/ulogd -- gen_context(system_u:object_r:ulogd_exec_t,s0)
ulogd: add Debian's log directory Debian uses /var/log/ulog/syslogemu.log by default to log network packets sent through a netlink multicast group by the firewall. Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>
2019-08-17 13:52:58 +00:00
/var/log/ulog(/.*)? gen_context(system_u:object_r:ulogd_var_log_t,s0)
Re-add policy modules from old refpolicy-contrib submodule.
2018-06-23 13:00:56 +00:00
/var/log/ulogd(/.*)? gen_context(system_u:object_r:ulogd_var_log_t,s0)