RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

journald: allow to remove /run/log/journal 

it happens when switching from tmpfs to persistent storage

Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com>
This commit is contained in:
Luca Boccassi 2020-02-18 15:13:29 +00:00
parent 2400f6a74c
commit 6afabe971f
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
policy/modules/system/logging.te
View File

@ -529,6 +529,9 @@ ifdef(`init_systemd',`
allow syslogd_t self:capability { chown setgid setuid sys_ptrace };
allow syslogd_t self:netlink_audit_socket { getattr getopt read setopt write };
# remove /run/log/journal when switching to permanent storage
allow syslogd_t var_log_t:dir rmdir;
kernel_getattr_dgram_sockets(syslogd_t)
kernel_read_ring_buffer(syslogd_t)
kernel_rw_stream_sockets(syslogd_t)