Attachment 153619 Details for Bug 238137 – patch against serefpolicy-2.4.6 to give logwatch access to clamav logs

[patch] patch against serefpolicy-2.4.6 to give logwatch access to clamav logs

serefpolicy-2.4.6-logwatch-clamav.patch (text/plain), 1.15 KB, created by Martin Poole on 2007-04-27 13:09:50 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Martin Poole

Created: 2007-04-27 13:09:50 UTC

Size: 1.15 KB

patch

obsolete

>--- serefpolicy-2.4.6/policy/modules/services/clamav.if.orig	2006-11-29 17:04:49.000000000 +0000
>+++ serefpolicy-2.4.6/policy/modules/services/clamav.if	2007-04-26 17:27:34.000000000 +0100
>@@ -102,3 +102,27 @@ interface(`clamav_domtrans_clamscan',`
> 	allow clamscan_t $1:fifo_file rw_file_perms;
> 	allow clamscan_t $1:process sigchld;
> ')
>+
>+########################################
>+## <summary>
>+##	Allow the specified domain to read
>+##	clamav log files.
>+## </summary>
>+## <param name="domain">
>+##	<summary>
>+##	Domain allowed access.
>+##	</summary>
>+## </param>
>+## <rolecap/>
>+#
>+interface(`clamav_read_log',`
>+	gen_require(`
>+		type clamd_var_log_t;
>+	')
>+
>+	logging_search_logs($1)
>+	allow $1 clamd_var_log_t:dir r_dir_perms;
>+	allow $1 clamd_var_log_t:file r_file_perms;
>+	allow $1 clamd_var_log_t:lnk_file { getattr read };
>+')
>+
>--- serefpolicy-2.4.6/policy/modules/admin/logwatch.te.orig	2006-11-29 17:04:49.000000000 +0000
>+++ serefpolicy-2.4.6/policy/modules/admin/logwatch.te	2007-04-26 17:30:26.000000000 +0100
>@@ -126,3 +126,7 @@ optional_policy(`
> optional_policy(`
> 	samba_read_log(logwatch_t)
> ')
>+
>+optional_policy(`
>+	clamav_read_log(logwatch_t)
>+')

Actions: View | Diff

Attachments on bug 238137: 153619