[node-patches] Change in ovirt-node[master]: ovirt.te: add sysstat_t type
dougsland at redhat.com
dougsland at redhat.com
Wed Oct 1 14:26:14 UTC 2014
Douglas Schilling Landgraf has uploaded a new change for review.
Change subject: ovirt.te: add sysstat_t type
......................................................................
ovirt.te: add sysstat_t type
This patch adds:
allow sysstat_t auditd_log_t:dir write;
allow sysstat_t auditd_log_t:file getattr;
Change-Id: I4e5304b178b819da9baf4b6cf6fd7cc333421c7d
Signed-off-by: Douglas Schilling Landgraf <dougsland at redhat.com>
---
M semodule/ovirt.te.in
1 file changed, 2 insertions(+), 2 deletions(-)
git pull ssh://gerrit.ovirt.org:29418/ovirt-node refs/changes/54/33654/1
diff --git a/semodule/ovirt.te.in b/semodule/ovirt.te.in
index 78e0e08..9f8902f 100644
--- a/semodule/ovirt.te.in
+++ b/semodule/ovirt.te.in
@@ -222,8 +222,8 @@
type admin_home_t;
}
allow sysstat_t admin_home_t:dir { search getattr };
-allow sysstat_t auditd_log_t:file { read lock open append };
-allow sysstat_t auditd_log_t:dir search;
+allow sysstat_t auditd_log_t:file { read lock open append getattr };
+allow sysstat_t auditd_log_t:dir { write search };
allow sysstat_t tmpfs_t:dir search;
allow sysstat_t var_lib_t:file { read append };
allow sysstat_t var_log_t:file { open read };
--
To view, visit http://gerrit.ovirt.org/33654
To unsubscribe, visit http://gerrit.ovirt.org/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I4e5304b178b819da9baf4b6cf6fd7cc333421c7d
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-node
Gerrit-Branch: master
Gerrit-Owner: Douglas Schilling Landgraf <dougsland at redhat.com>
More information about the node-patches
mailing list