From 1459a3fa5ce90f91286140dfb91635c18a00387b Mon Sep 17 00:00:00 2001
From: Adam Williamson <awilliam@redhat.com>
Date: Wed, 29 May 2019 15:59:59 -0700
Subject: [PATCH] Update rsyslog-audit SELinux policy with one more needed perm

This one was dontaudit. Grr.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
---
 roles/base/files/selinux/rsyslog-audit.pp | Bin 1208 -> 1366 bytes
 roles/base/files/selinux/rsyslog-audit.te |   4 +++-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/roles/base/files/selinux/rsyslog-audit.pp b/roles/base/files/selinux/rsyslog-audit.pp
index 24cdec2c00e21fbc792298662295671e15909c81..b6612bfb115ce3dde0052327329d10f33fb505eb 100644
GIT binary patch
delta 122
zcmdnNd5vpA5R;L^<b#aD6Vw0jGBYqRfG{hFo?O5v&03aN6kjqqo3WD>B+fWlkx6{A
y0MiCW7)yhZWwIcX_~Za44n`J`F_SMaIWV$s7G#cM6oVNBHiQwRA8bYriw^*Qg&1`J

delta 66
zcmcb{wS#j)5R;+9<d2NP6Vv~2FflMNfbirAjGc^3lk1q`Cs#7%O#Z?sFgcRhVR9+6
V#AIC-h0Pb4l^GeCCUdd+005PS5|sb|

diff --git a/roles/base/files/selinux/rsyslog-audit.te b/roles/base/files/selinux/rsyslog-audit.te
index 76121d42f0..daf535ee2e 100644
--- a/roles/base/files/selinux/rsyslog-audit.te
+++ b/roles/base/files/selinux/rsyslog-audit.te
@@ -1,8 +1,9 @@
-module rsyslog-audit 1.1;
+module rsyslog-audit 1.2;
 
 require {
 	type auditd_log_t;
 	type syslogd_t;
+	type var_t;
 	class file { getattr ioctl open read };
 	class dir { getattr open read search };
 }
@@ -10,3 +11,4 @@ require {
 #============= syslogd_t ==============
 allow syslogd_t auditd_log_t:dir { getattr open read search };
 allow syslogd_t auditd_log_t:file { getattr ioctl open read };
+allow syslogd_t var_t:dir read;