logging: allow domains sending syslog messages to connect to kernel unix

stream sockets Signed-off-by: Kenton Groombridge <me@concord.sh>
2022-12-07 10:30:09 -05:00 · 2022-12-07 10:30:09 -05:00 · d96b591a70
commit d96b591a70
parent d34dd9571e
1 changed files with 1 additions and 0 deletions
--- a/policy/modules/system/logging.if
+++ b/policy/modules/system/logging.if
@ -703,6 +703,7 @@ interface(`logging_send_syslog_msg',`
 		allow syslogd_t $1:process signull;

 		kernel_dgram_send($1)
+		kernel_stream_connect($1)
 	')

 ')