nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add comments about new capabilities for syslogd_t.

Browse Source
This commit is contained in:
Chris PeBenito 2013-11-13 09:26:38 -05:00
parent b00d94fb72
commit 9fcc6fe625
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
policy/modules/system/logging.te
View File

@ -361,6 +361,7 @@ dontaudit syslogd_t self:capability sys_tty_config;
# setrlimit for syslog-ng
# getsched for syslog-ng
# setsched for rsyslog
# getcap/setcap for syslog-ng
allow syslogd_t self:process { getcap setcap signal_perms setpgid setrlimit getsched setsched };
# receive messages to be logged
allow syslogd_t self:unix_dgram_socket create_socket_perms;