diff --git a/policy/modules/system/logging.if b/policy/modules/system/logging.if index b2bba9849..9215579e8 100644 --- a/policy/modules/system/logging.if +++ b/policy/modules/system/logging.if @@ -427,6 +427,24 @@ interface(`logging_domtrans_syslog',` ') ') +######################################## +## +## Allow specified domain to start/stop syslog units +## +## +## +## Domain allowed access. +## +## +# +interface(`logging_startstop_syslog',` + gen_require(` + type syslogd_unit_t; + class service { start stop }; + ') + allow $1 syslogd_unit_t:service { start stop }; +') + ######################################## ## ## Allow specified domain to check status of syslog unit