[node-patches] Change in ovirt-node[master]: ovirt.te: add sysstat_t type

dougsland at redhat.com dougsland at redhat.com
Wed Oct 1 14:26:14 UTC 2014


Douglas Schilling Landgraf has uploaded a new change for review.

Change subject: ovirt.te: add sysstat_t type
......................................................................

ovirt.te: add sysstat_t type

This patch adds:
    allow sysstat_t auditd_log_t:dir write;
    allow sysstat_t auditd_log_t:file getattr;

Change-Id: I4e5304b178b819da9baf4b6cf6fd7cc333421c7d
Signed-off-by: Douglas Schilling Landgraf <dougsland at redhat.com>
---
M semodule/ovirt.te.in
1 file changed, 2 insertions(+), 2 deletions(-)


  git pull ssh://gerrit.ovirt.org:29418/ovirt-node refs/changes/54/33654/1

diff --git a/semodule/ovirt.te.in b/semodule/ovirt.te.in
index 78e0e08..9f8902f 100644
--- a/semodule/ovirt.te.in
+++ b/semodule/ovirt.te.in
@@ -222,8 +222,8 @@
     type admin_home_t;
 }
 allow sysstat_t admin_home_t:dir { search getattr };
-allow sysstat_t auditd_log_t:file { read lock open append };
-allow sysstat_t auditd_log_t:dir search;
+allow sysstat_t auditd_log_t:file { read lock open append getattr };
+allow sysstat_t auditd_log_t:dir { write search };
 allow sysstat_t tmpfs_t:dir search;
 allow sysstat_t var_lib_t:file { read append };
 allow sysstat_t var_log_t:file { open read };


-- 
To view, visit http://gerrit.ovirt.org/33654
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I4e5304b178b819da9baf4b6cf6fd7cc333421c7d
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-node
Gerrit-Branch: master
Gerrit-Owner: Douglas Schilling Landgraf <dougsland at redhat.com>



More information about the node-patches mailing list