init: allow systemd to activate journald-audit.socket

Signed-off-by: bauen1 <j2468h@gmail.com>
This commit is contained in:
bauen1 2020-05-17 16:52:46 +02:00
parent 5fb8157616
commit 8784dd0c66
No known key found for this signature in database
GPG Key ID: FF0AAF5E0812BA9C
2 changed files with 20 additions and 0 deletions

View File

@ -433,6 +433,7 @@ ifdef(`init_systemd',`
logging_send_audit_msgs(init_t)
logging_relabelto_devlog_sock_files(init_t)
logging_relabel_generic_log_dirs(init_t)
logging_audit_socket_activation(init_t)
# lvm2-activation-generator checks file labels
seutil_read_file_contexts(init_t)

View File

@ -484,6 +484,25 @@ interface(`logging_setattr_syslogd_tmp_files',`
allow $1 syslogd_tmp_t:file setattr;
')
########################################
## <summary>
## Allow the domain to create the audit socket
## for syslogd.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`logging_audit_socket_activation', `
gen_require(`
type syslogd_t;
')
allow $1 syslogd_t:netlink_audit_socket create_socket_perms;
')
########################################
## <summary>
## Relabel to and from syslog temporary file type.