diff --git a/policy/modules/system/systemd.if b/policy/modules/system/systemd.if index 740b3a925..c6d40b10c 100644 --- a/policy/modules/system/systemd.if +++ b/policy/modules/system/systemd.if @@ -409,6 +409,24 @@ interface(`systemd_manage_journal_files',` allow $1 systemd_journal_t:file map; ') +######################################## +## +## Allow domain to read systemd_journal_t files +## +## +## +## Domain allowed access. +## +## +# +interface(`systemd_read_journal_files',` + gen_require(` + type systemd_journal_t; + ') + + list_dirs_pattern($1, systemd_journal_t, systemd_journal_t) + mmap_read_files_pattern($1, systemd_journal_t, systemd_journal_t) +') ######################################## ##