patch to allow the audit dispatcher to read the system state

This patch allows the audit dispatcher to read the system
state.
This commit is contained in:
Guido Trentalancia 2011-02-16 07:29:17 +01:00 committed by Chris PeBenito
parent bdc7622e86
commit ff07d7d209

View File

@ -226,6 +226,8 @@ allow audisp_t auditd_t:unix_stream_socket rw_socket_perms;
manage_sock_files_pattern(audisp_t, audisp_var_run_t, audisp_var_run_t)
files_pid_filetrans(audisp_t, audisp_var_run_t, sock_file)
kernel_read_system_state(audisp_t)
corecmd_exec_bin(audisp_t)
corecmd_exec_shell(audisp_t)