nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

stunnel: add log type and rules

Browse Source 
Signed-off-by: Kenton Groombridge <me@concord.sh>
This commit is contained in:
Kenton Groombridge 2021-01-26 18:05:56 -05:00
parent c521270688
commit e34e339b96
No known key found for this signature in database
GPG Key ID: 16DD27345D9905A7
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
policy/modules/services/stunnel.te
View File

@ -15,6 +15,9 @@ files_config_file(stunnel_etc_t)
type stunnel_runtime_t alias stunnel_var_run_t;
files_runtime_file(stunnel_runtime_t)
type stunnel_log_t;
logging_log_file(stunnel_log_t)
type stunnel_tmp_t;
files_tmp_file(stunnel_tmp_t)
@ -42,6 +45,11 @@ manage_dirs_pattern(stunnel_t, stunnel_runtime_t, stunnel_runtime_t)
manage_files_pattern(stunnel_t, stunnel_runtime_t, stunnel_runtime_t)
files_runtime_filetrans(stunnel_t, stunnel_runtime_t, { dir file })
manage_dirs_pattern(stunnel_t, stunnel_log_t, stunnel_log_t)
create_files_pattern(stunnel_t, stunnel_log_t, stunnel_log_t)
append_files_pattern(stunnel_t, stunnel_log_t, stunnel_log_t)
logging_log_filetrans(stunnel_t, stunnel_log_t, { dir file })
kernel_read_kernel_sysctls(stunnel_t)
kernel_read_system_state(stunnel_t)
kernel_read_network_state(stunnel_t)