nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

add interface to send syslog messages

Browse Source
This commit is contained in:
Chris PeBenito 2005-04-19 20:44:07 +00:00
parent 5050e500fe
commit 8c77177b75
1 changed files with 21 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
refpolicy/policy/modules/system/logging.if
View File

@ -13,6 +13,27 @@ attribute logfile;
files_make_file_depend
')
#######################################
#
# logging_send_system_log_message(type,[`optional'])
#
define(`logging_send_system_log_message',`
requires_block_template(logging_send_system_log_message_depend,$2)
allow $1 devlog_t:sock_file { ioctl read getattr lock write append };
# the type of socket depends on the syslog daemon
allow $1 syslogd_t:unix_dgram_socket sendto;
allow $1 syslogd_t:unix_stream_socket connectto;
allow $1 self:unix_dgram_socket { create read getattr write setattr append bind connect getopt setopt shutdown };
allow $1 self:unix_stream_socket { create read getattr write setattr append bind connect getopt setopt shutdown };
')
define(`logging_send_system_log_message_depend',`
type syslogd_t, devlog_t;
class sock_file { ioctl read getattr lock write append };
class unix_dgram_socket { create read getattr write setattr append bind connect getopt setopt shutdown sendto };
class unix_stream_socket { create read getattr write setattr append bind connect getopt setopt shutdown connectto };
')
#######################################
#
# logging_append_all_logs(type,[`optional'])