[node-patches] Change in ovirt-node[ovirt-3.5]: semodule: syslogd_t tmpfs_t:file read

[dougsland at redhat.com]

Douglas Schilling Landgraf has uploaded a new change for review.

Change subject: semodule: syslogd_t tmpfs_t:file read
......................................................................

semodule: syslogd_t tmpfs_t:file read

fix avc:
type=AVC msg=audit(1427483370.455:55): avc:  denied  { read } for  pid=1889 comm="rsyslogd" name="resolv.conf"
dev="tmpfs" ino=21444 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file

Change-Id: Idc15f2e1b87c74e2d71debf430cc5e75b6d54d46
Signed-off-by: Douglas Schilling Landgraf <dougsland at redhat.com>
---
M semodule/ovirt.te.in
1 file changed, 1 insertion(+), 0 deletions(-)


  git pull ssh://gerrit.ovirt.org:29418/ovirt-node refs/changes/16/44716/1

diff --git a/semodule/ovirt.te.in b/semodule/ovirt.te.in
index 2ead938..5d81534 100644
--- a/semodule/ovirt.te.in
+++ b/semodule/ovirt.te.in
@@ -245,6 +245,7 @@
 
 #============= syslogd_t ==============
 allow syslogd_t var_lib_t:file { write getattr open };
+allow syslogd_t tmpfs_t:file read;
 
 
 #============= sysstat_t ==============


-- 
To view, visit https://gerrit.ovirt.org/44716
To unsubscribe, visit https://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Idc15f2e1b87c74e2d71debf430cc5e75b6d54d46
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-node
Gerrit-Branch: ovirt-3.5
Gerrit-Owner: Douglas Schilling Landgraf <dougsland at redhat.com>