RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

init: allow systemd to activate journald-audit.socket 

Signed-off-by: bauen1 <j2468h@gmail.com>
This commit is contained in:
bauen1 2020-05-17 16:52:46 +02:00
parent 5fb8157616
commit 8784dd0c66
No known key found for this signature in database
GPG Key ID: FF0AAF5E0812BA9C
2 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
policy/modules/system/init.te
View File

@ -433,6 +433,7 @@ ifdef(`init_systemd',`
logging_send_audit_msgs(init_t) logging_send_audit_msgs(init_t)
logging_relabelto_devlog_sock_files(init_t) logging_relabelto_devlog_sock_files(init_t)
logging_relabel_generic_log_dirs(init_t) logging_relabel_generic_log_dirs(init_t)
logging_audit_socket_activation(init_t)
# lvm2-activation-generator checks file labels # lvm2-activation-generator checks file labels
seutil_read_file_contexts(init_t) seutil_read_file_contexts(init_t)

19
policy/modules/system/logging.if
View File

@ -484,6 +484,25 @@ interface(`logging_setattr_syslogd_tmp_files',`
allow $1 syslogd_tmp_t:file setattr; allow $1 syslogd_tmp_t:file setattr;
') ')
########################################
## <summary>
## Allow the domain to create the audit socket
## for syslogd.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`logging_audit_socket_activation', `
gen_require(`
type syslogd_t;
')
allow $1 syslogd_t:netlink_audit_socket create_socket_perms;
')
######################################## ########################################
## <summary> ## <summary>
## Relabel to and from syslog temporary file type. ## Relabel to and from syslog temporary file type.