Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

rsyslog-audit policy: also allow 'open'

Browse source 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
This commit is contained in:
Adam Williamson 2019-05-29 10:21:10 -07:00
parent ca0b1da17d
commit f4156c3db7
2 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

BIN
roles/base/files/selinux/rsyslog-audit.pp
View file

Binary file not shown.

4
roles/base/files/selinux/rsyslog-audit.te
View file

@ -4,9 +4,9 @@ require {
type auditd_log_t;
type syslogd_t;
class file { getattr ioctl open read };
class dir { getattr read search };
class dir { getattr open read search };
}
#============= syslogd_t ==============
allow syslogd_t auditd_log_t:dir { getattr read search };
allow syslogd_t auditd_log_t:dir { getattr open read search };
allow syslogd_t auditd_log_t:file { getattr ioctl open read };