selinux-refpolicy/policy/modules/roles/logadm.te
Kenton Groombridge cc8374fd24
various: systemd user fixes and additional support
This finishes up a lot of the work originally started on systemd --user
support including interacting with user units, communicating with the
user's systemd instance, and reading the system journal.

Signed-off-by: Kenton Groombridge <me@concord.sh>
2021-03-18 15:58:17 -04:00

24 lines
408 B
Plaintext

policy_module(logadm, 1.0.0)
########################################
#
# Declarations
#
role logadm_r;
userdom_base_user_template(logadm)
########################################
#
# logadmin local policy
#
allow logadm_t self:capability { dac_override dac_read_search kill sys_nice sys_ptrace };
logging_admin(logadm_t, logadm_r)
optional_policy(`
dbus_role_template(logadm, logadm_r, logadm_t)
')