[node-patches] Change in ovirt-node[ovirt-3.5]: semodule: Add gettattr to syslogd_t tmpfs_t

[dougsland at redhat.com]

Douglas Schilling Landgraf has uploaded a new change for review.

Change subject: semodule: Add gettattr to syslogd_t tmpfs_t
......................................................................

semodule: Add gettattr to syslogd_t tmpfs_t

Avoid the below AVC:
type=AVC msg=audit(1432255421.942:47): avc:  denied  { getattr } for
pid=1920 comm="rsyslogd" path="/etc/resolv.conf" dev="tmpfs"
ino=430254 scontext=system_u:system_r:syslogd_t:s0
tcontext=system_u:object_r:tmpfs_t:s0 tclass=file

Change-Id: I9bcec6bda75c593fd32adcf9140c30b4445d0338
Signed-off-by: Douglas Schilling Landgraf <dougsland at redhat.com>
---
M semodule/ovirt.te.in
1 file changed, 1 insertion(+), 1 deletion(-)


  git pull ssh://gerrit.ovirt.org:29418/ovirt-node refs/changes/18/44718/1

diff --git a/semodule/ovirt.te.in b/semodule/ovirt.te.in
index b7604b4..1774584 100644
--- a/semodule/ovirt.te.in
+++ b/semodule/ovirt.te.in
@@ -245,7 +245,7 @@
 
 #============= syslogd_t ==============
 allow syslogd_t var_lib_t:file { write getattr open };
-allow syslogd_t tmpfs_t:file { read open };
+allow syslogd_t tmpfs_t:file { read getattr open };
 
 
 #============= sysstat_t ==============


-- 
To view, visit https://gerrit.ovirt.org/44718
To unsubscribe, visit https://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I9bcec6bda75c593fd32adcf9140c30b4445d0338
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-node
Gerrit-Branch: ovirt-3.5
Gerrit-Owner: Douglas Schilling Landgraf <dougsland at redhat.com>