From bc5a858a4e704b752b2744c477986c4827a53680 Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Fri, 5 Nov 2010 13:13:21 -0400 Subject: [PATCH] Change /dev/log fc to MLS system high. When the syslog recreates this sock_file on startup, it gets this sensitivity anyway. This will prevent incorrect relabeling if /dev is relabeled. --- policy/modules/system/logging.fc | 2 +- policy/modules/system/logging.te | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/policy/modules/system/logging.fc b/policy/modules/system/logging.fc index 362614c72..571599b50 100644 --- a/policy/modules/system/logging.fc +++ b/policy/modules/system/logging.fc @@ -1,4 +1,4 @@ -/dev/log -s gen_context(system_u:object_r:devlog_t,s0) +/dev/log -s gen_context(system_u:object_r:devlog_t,mls_systemhigh) /etc/rsyslog.conf gen_context(system_u:object_r:syslog_conf_t,s0) /etc/syslog.conf gen_context(system_u:object_r:syslog_conf_t,s0) diff --git a/policy/modules/system/logging.te b/policy/modules/system/logging.te index 828156a38..aa2b0a680 100644 --- a/policy/modules/system/logging.te +++ b/policy/modules/system/logging.te @@ -1,4 +1,4 @@ -policy_module(logging, 1.16.0) +policy_module(logging, 1.16.1) ######################################## #