diff --git a/policy/modules/roles/sysadm.te b/policy/modules/roles/sysadm.te index 7f8ea1d08..651c19cf2 100644 --- a/policy/modules/roles/sysadm.te +++ b/policy/modules/roles/sysadm.te @@ -92,6 +92,9 @@ ifdef(`init_systemd',` # Allow sysadm to query and set networking settings on the system. systemd_dbus_chat_networkd(sysadm_t) fs_read_nsfs_files(sysadm_t) + + # Allow sysadm to follow logs in the journal, i.e. with podman logs -f + systemd_watch_journal_dirs(sysadm_t) ') tunable_policy(`allow_ptrace',`