diff --git a/policy/modules/system/logging.if b/policy/modules/system/logging.if index 16091eb6b..c86c4bd96 100644 --- a/policy/modules/system/logging.if +++ b/policy/modules/system/logging.if @@ -427,6 +427,25 @@ interface(`logging_domtrans_syslog',` ') ') +######################################## +## +## Allow specified domain to check status of syslog unit +## +## +## +## Domain allowed access. +## +## +# +interface(`logging_status_syslog',` + gen_require(` + type syslogd_unit_t; + class service status; + ') + + allow $1 syslogd_unit_t:service status; +') + ######################################## ## ## Set the attributes of syslog temporary files.