diff --git a/policy/modules/system/logging.te b/policy/modules/system/logging.te index b3f0ed7c3..53b896d0d 100644 --- a/policy/modules/system/logging.te +++ b/policy/modules/system/logging.te @@ -418,7 +418,8 @@ kernel_read_kernel_sysctls(syslogd_t) kernel_read_proc_symlinks(syslogd_t) # Allow access to /proc/kmsg for syslog-ng kernel_read_messages(syslogd_t) -kernel_read_vm_sysctls(syslogd_t) +# rsyslog +kernel_read_vm_overcommit_sysctl(syslogd_t) kernel_clear_ring_buffer(syslogd_t) kernel_change_ring_buffer_level(syslogd_t) # Read ring buffer for journald