nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Change /dev/log fc to MLS system high.

Browse Source 
When the syslog recreates this sock_file on startup, it gets this sensitivity anyway.
This will prevent incorrect relabeling if /dev is relabeled.
This commit is contained in:
Chris PeBenito 2010-11-05 13:13:21 -04:00
parent 47ecd96afa
commit bc5a858a4e
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/system/logging.fc
View File

@ -1,4 +1,4 @@
/dev/log -s gen_context(system_u:object_r:devlog_t,s0)
/dev/log -s gen_context(system_u:object_r:devlog_t,mls_systemhigh)
/etc/rsyslog.conf gen_context(system_u:object_r:syslog_conf_t,s0)
/etc/syslog.conf gen_context(system_u:object_r:syslog_conf_t,s0)

2
policy/modules/system/logging.te
View File

@ -1,4 +1,4 @@
policy_module(logging, 1.16.0)
policy_module(logging, 1.16.1)
########################################
#