diff --git a/policy/modules/admin/logrotate.te b/policy/modules/admin/logrotate.te index 64ff7c5e6..dd1ef1ff9 100644 --- a/policy/modules/admin/logrotate.te +++ b/policy/modules/admin/logrotate.te @@ -1,5 +1,5 @@ -policy_module(logrotate, 1.12.0) +policy_module(logrotate, 1.12.1) ######################################## # @@ -63,7 +63,6 @@ files_tmp_filetrans(logrotate_t, logrotate_tmp_t, { file dir }) create_dirs_pattern(logrotate_t, logrotate_var_lib_t, logrotate_var_lib_t) manage_files_pattern(logrotate_t, logrotate_var_lib_t, logrotate_var_lib_t) files_var_lib_filetrans(logrotate_t, logrotate_var_lib_t, file) -files_read_var_lib_files(logrotate_t) kernel_read_system_state(logrotate_t) kernel_read_kernel_sysctls(logrotate_t) @@ -99,6 +98,7 @@ files_read_etc_files(logrotate_t) files_read_etc_runtime_files(logrotate_t) files_read_all_pids(logrotate_t) files_search_all(logrotate_t) +files_read_var_lib_files(logrotate_t) # Write to /var/spool/slrnpull - should be moved into its own type. files_manage_generic_spool(logrotate_t) files_manage_generic_spool_dirs(logrotate_t)