Attachment 152901 Details for Bug 236855 – Adds /var/log/aide and /var/log/aide/.* aide_t:SystemHigh fcontexts

[patch] Adds /var/log/aide and /var/log/aide/.* aide_t:SystemHigh fcontexts

serefpolicy-aide-dir-fc.patch (text/plain), 1.10 KB, created by George C. Wilson on 2007-04-18 13:22:11 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: George C. Wilson

Created: 2007-04-18 13:22:11 UTC

Size: 1.10 KB

patch

obsolete

>diff -Naur serefpolicy-2.4.6/policy/modules/services/aide.fc serefpolicy-2.4.6.g/policy/modules/services/aide.fc
>--- serefpolicy-2.4.6/policy/modules/services/aide.fc	2007-04-18 07:49:45.000000000 -0500
>+++ serefpolicy-2.4.6.g/policy/modules/services/aide.fc	2007-04-17 19:18:15.000000000 -0500
>@@ -2,4 +2,5 @@
> 
> /var/lib/aide(/.*)?		gen_context(system_u:object_r:aide_db_t,mls_systemhigh)
> 
>-/var/log/aide.log	--	gen_context(system_u:object_r:aide_log_t,mls_systemhigh)
>+/var/log/aide		-d	gen_context(system_u:object_r:aide_log_t,mls_systemhigh)
>+/var/log/aide/.*	--	gen_context(system_u:object_r:aide_log_t,mls_systemhigh)
>diff -Naur serefpolicy-2.4.6/policy/modules/services/aide.te serefpolicy-2.4.6.g/policy/modules/services/aide.te
>--- serefpolicy-2.4.6/policy/modules/services/aide.te	2007-04-18 07:49:45.000000000 -0500
>+++ serefpolicy-2.4.6.g/policy/modules/services/aide.te	2007-04-18 07:45:48.000000000 -0500
>@@ -37,6 +37,7 @@
> 
> # logs
> logging_log_filetrans(aide_t,aide_log_t,file)
>+allow aide_t aide_log_t:dir { add_name write };
> allow aide_t aide_log_t:file create_file_perms;
> 
> files_read_all_files(aide_t)

Actions: View | Diff

Attachments on bug 236855: 152866 | 152867 | 152868 | 152901