RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

logging 

Prosody and ntpd don't just need append access to their log files.
This commit is contained in:
Russell Coker 2019-01-08 19:55:27 +11:00 committed by Chris PeBenito
parent d2a1333fdc
commit 4a95d08da1
2 changed files with 4 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
policy/modules/services/jabber.te
View File

@ -80,9 +80,8 @@ allow jabberd_t self:netlink_route_socket r_netlink_socket_perms;
manage_files_pattern(jabberd_t, jabberd_lock_t, jabberd_lock_t) manage_files_pattern(jabberd_t, jabberd_lock_t, jabberd_lock_t)
allow jabberd_t jabberd_log_t:dir setattr_dir_perms; allow jabberd_t jabberd_log_t:dir setattr_dir_perms;
append_files_pattern(jabberd_t, jabberd_log_t, jabberd_log_t) manage_files_pattern(jabberd_t, jabberd_log_t, jabberd_log_t)
create_files_pattern(jabberd_t, jabberd_log_t, jabberd_log_t)
setattr_files_pattern(jabberd_t, jabberd_log_t, jabberd_log_t)
logging_log_filetrans(jabberd_t, jabberd_log_t, { file dir }) logging_log_filetrans(jabberd_t, jabberd_log_t, { file dir })
manage_files_pattern(jabberd_domain, jabberd_spool_t, jabberd_spool_t) manage_files_pattern(jabberd_domain, jabberd_spool_t, jabberd_spool_t)

5
policy/modules/services/ntp.te
View File

@ -73,9 +73,8 @@ read_lnk_files_pattern(ntpd_t, ntpd_key_t, ntpd_key_t)
allow ntpd_t ntpd_lock_t:file rw_file_perms; allow ntpd_t ntpd_lock_t:file rw_file_perms;
allow ntpd_t ntpd_log_t:dir setattr_dir_perms; allow ntpd_t ntpd_log_t:dir setattr_dir_perms;
append_files_pattern(ntpd_t, ntpd_log_t, ntpd_log_t) manage_dirs_pattern(ntpd_t, ntpd_log_t, ntpd_log_t)
create_files_pattern(ntpd_t, ntpd_log_t, ntpd_log_t) manage_files_pattern(ntpd_t, ntpd_log_t, ntpd_log_t)
setattr_files_pattern(ntpd_t, ntpd_log_t, ntpd_log_t)
logging_log_filetrans(ntpd_t, ntpd_log_t, { file dir }) logging_log_filetrans(ntpd_t, ntpd_log_t, { file dir })
manage_files_pattern(ntpd_t, ntpd_pid_t, ntpd_pid_t) manage_files_pattern(ntpd_t, ntpd_pid_t, ntpd_pid_t)