patch to allow the audit dispatcher to read the system state
This patch allows the audit dispatcher to read the system state.
This commit is contained in:
parent
bdc7622e86
commit
ff07d7d209
@ -226,6 +226,8 @@ allow audisp_t auditd_t:unix_stream_socket rw_socket_perms;
|
||||
manage_sock_files_pattern(audisp_t, audisp_var_run_t, audisp_var_run_t)
|
||||
files_pid_filetrans(audisp_t, audisp_var_run_t, sock_file)
|
||||
|
||||
kernel_read_system_state(audisp_t)
|
||||
|
||||
corecmd_exec_bin(audisp_t)
|
||||
corecmd_exec_shell(audisp_t)
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user