diff --git a/policy/modules/system/logging.if b/policy/modules/system/logging.if index be20dca18..69579934e 100644 --- a/policy/modules/system/logging.if +++ b/policy/modules/system/logging.if @@ -684,6 +684,25 @@ interface(`logging_rw_generic_log_dirs',` allow $1 var_log_t:dir rw_dir_perms; ') +####################################### +## +## Search through all log dirs. +## +## +## +## Domain allowed access. +## +## +## +# +interface(`logging_search_all_log_dirs',` + gen_require(` + attribute logfile; + ') + + allow $1 logfile:dir search_dir_perms; +') + ####################################### ## ## Set attributes on all log dirs.