RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'var_run' of git://github.com/cgzones/refpolicy

This commit is contained in:
Chris PeBenito 2017-03-25 13:03:32 -04:00
parent 5e20a0ee5b 49580d2350
commit 1561ea6d42
2 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
policy/modules/system/logging.fc
View File

@ -55,8 +55,6 @@ ifdef(`distro_redhat',`
/var/named/chroot/dev/log -s gen_context(system_u:object_r:devlog_t,s0)
')
/run/systemd/journal/stdout -s gen_context(system_u:object_r:devlog_t,mls_systemhigh)
/run/audit_events -s gen_context(system_u:object_r:auditd_var_run_t,mls_systemhigh)
/run/audispd_events -s gen_context(system_u:object_r:audisp_var_run_t,mls_systemhigh)
/run/auditd\.pid -- gen_context(system_u:object_r:auditd_var_run_t,mls_systemhigh)
@ -64,7 +62,6 @@ ifdef(`distro_redhat',`
/run/klogd\.pid -- gen_context(system_u:object_r:klogd_var_run_t,s0)
/run/log -s gen_context(system_u:object_r:devlog_t,s0)
/run/log -d gen_context(system_u:object_r:var_log_t,s0-mls_systemhigh)
/run/log/journal(/.*)? gen_context(system_u:object_r:var_log_t,mls_systemhigh)
/run/metalog\.pid -- gen_context(system_u:object_r:syslogd_var_run_t,s0)
/run/rsyslogd\.pid -- gen_context(system_u:object_r:syslogd_var_run_t,mls_systemhigh)
/run/syslogd\.pid -- gen_context(system_u:object_r:syslogd_var_run_t,mls_systemhigh)
@ -72,8 +69,9 @@ ifdef(`distro_redhat',`
/run/syslog-ng\.pid -- gen_context(system_u:object_r:syslogd_var_run_t,mls_systemhigh)
/run/syslog-ng(/.*)? gen_context(system_u:object_r:syslogd_var_run_t,s0)
/run/systemd/journal(/.*)? gen_context(system_u:object_r:syslogd_var_run_t,mls_systemhigh)
/run/systemd/journal/socket -s gen_context(system_u:object_r:devlog_t,mls_systemhigh)
/run/systemd/journal/syslog -s gen_context(system_u:object_r:devlog_t,mls_systemhigh)
/run/systemd/journal/socket -s gen_context(system_u:object_r:devlog_t,mls_systemhigh)
/run/systemd/journal/stdout -s gen_context(system_u:object_r:devlog_t,mls_systemhigh)
/run/systemd/journal/syslog -s gen_context(system_u:object_r:devlog_t,mls_systemhigh)
/run/systemd/journal/dev-log -s gen_context(system_u:object_r:devlog_t,mls_systemhigh)
/var/spool/audit(/.*)? gen_context(system_u:object_r:audit_spool_t,mls_systemhigh)

4
policy/modules/system/systemd.fc
View File

@ -1,3 +1,5 @@
/run/log/journal(/.*)? gen_context(system_u:object_r:systemd_journal_t,s0)
/usr/bin/systemd-analyze -- gen_context(system_u:object_r:systemd_analyze_exec_t,s0)
/usr/bin/systemd-cgtop -- gen_context(system_u:object_r:systemd_cgtop_exec_t,s0)
/usr/bin/systemd-coredump -- gen_context(system_u:object_r:systemd_coredump_exec_t,s0)
@ -52,4 +54,4 @@
/run/tmpfiles\.d/.* <<none>>
/var/log/journal(/.*)? gen_context(system_u:object_r:systemd_journal_t,s0)
/run/log/journal(/.*)? gen_context(system_u:object_r:systemd_journal_t,s0)