selinux-refpolicy/policy/modules/roles/logadm.te

policy_module(logadm)

########################################
#
# Declarations
#

role logadm_r;

userdom_base_user_template(logadm)

########################################
#
# logadmin local policy
#

allow logadm_t self:capability { dac_override dac_read_search kill sys_nice sys_ptrace };

logging_admin(logadm_t, logadm_r)

optional_policy(`
	dbus_role_template(logadm, logadm_r, logadm_t)
')
Drop module versioning. Semodule stopped using this many years ago. The policy_module() macro will continue to support an optional second parameter as version. If it is not specified, a default value of 1 is set. Signed-off-by: Chris PeBenito <pebenito@ieee.org> 2022-01-06 13:55:54 +00:00			`policy_module(logadm)`
trunk: 6 patches from dan. 2009-03-19 17:56:10 +00:00
			`########################################`
			`#`
			`# Declarations`
			`#`

			`role logadm_r;`

			`userdom_base_user_template(logadm)`

			`########################################`
			`#`
			`# logadmin local policy`
			`#`

Sort capabilities permissions from Russell Coker. 2017-02-15 23:47:33 +00:00			`allow logadm_t self:capability { dac_override dac_read_search kill sys_nice sys_ptrace };`
trunk: 6 patches from dan. 2009-03-19 17:56:10 +00:00
			`logging_admin(logadm_t, logadm_r)`
various: systemd user fixes and additional support This finishes up a lot of the work originally started on systemd --user support including interacting with user units, communicating with the user's systemd instance, and reading the system journal. Signed-off-by: Kenton Groombridge <me@concord.sh> 2021-03-13 23:22:59 +00:00
			optional_policy(`
			`dbus_role_template(logadm, logadm_r, logadm_t)`
			`')`