[node-patches] Change in ovirt-node[ovirt-3.5]: semodule: Add entry for svirt var_log_t

[fabiand at redhat.com]

Hello Douglas Schilling Landgraf,

I'd like you to do a code review.  Please visit

    https://gerrit.ovirt.org/42488

to review the following change.

Change subject: semodule: Add entry for svirt var_log_t
......................................................................

semodule: Add entry for svirt var_log_t

To write into /var/log requires allow svirt_t to var_log_t dir

Change-Id: Icff26fc26dfe5a208ca9ad9ed724da0ec7211765
Bug-Url: https://bugzilla.redhat.com/show_bug.cgi?id=1215554
Signed-off-by: Douglas Schilling Landgraf <dougsland at redhat.com>
---
M semodule/ovirt.te.in
1 file changed, 1 insertion(+), 0 deletions(-)


  git pull ssh://gerrit.ovirt.org:29418/ovirt-node refs/changes/88/42488/1

diff --git a/semodule/ovirt.te.in b/semodule/ovirt.te.in
index b69a0a1..8da1800 100644
--- a/semodule/ovirt.te.in
+++ b/semodule/ovirt.te.in
@@ -240,6 +240,7 @@
 allow svirt_t sanlock_t:unix_stream_socket connectto;
 allow svirt_t nfs_t:file open;
 allow svirt_t bin_t:file entrypoint;
+allow svirt_t var_log_t:dir { write add_name };
 
 #============= syslogd_t ==============
 allow syslogd_t var_lib_t:file { write getattr open };


-- 
To view, visit https://gerrit.ovirt.org/42488
To unsubscribe, visit https://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Icff26fc26dfe5a208ca9ad9ed724da0ec7211765
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-node
Gerrit-Branch: ovirt-3.5
Gerrit-Owner: Fabian Deutsch <fabiand at redhat.com>
Gerrit-Reviewer: Douglas Schilling Landgraf <dougsland at redhat.com>