nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #573 from montjoie/rsyslog-empty-dev

Browse Source 
rsyslog: add label for /var/empty/dev/log
This commit is contained in:
Chris PeBenito 2023-01-05 08:43:12 -05:00 committed by GitHub
commit c594d3b803
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
policy/modules/kernel/devices.fc
View File

@ -236,3 +236,7 @@ ifdef(`distro_redhat',`
/var/named/chroot/dev/random -c gen_context(system_u:object_r:random_device_t,s0)
/var/named/chroot/dev/zero -c gen_context(system_u:object_r:zero_device_t,s0)
')
ifdef(`distro_gentoo',`
/var/empty/dev -d gen_context(system_u:object_r:device_t,s0)
')

4
policy/modules/system/logging.fc
View File

@ -68,6 +68,10 @@ ifdef(`distro_redhat',`
/var/named/chroot/dev/log -s gen_context(system_u:object_r:devlog_t,s0)
')
ifdef(`distro_gentoo',`
/var/empty/dev/log -s gen_context(system_u:object_r:devlog_t,s0)
')
/run/audit_events -s gen_context(system_u:object_r:auditd_runtime_t,mls_systemhigh)
/run/audispd_events -s gen_context(system_u:object_r:audisp_runtime_t,mls_systemhigh)
/run/auditd\.pid -- gen_context(system_u:object_r:auditd_runtime_t,mls_systemhigh)