2009-07-01 14:59:20

by srivasta

Subject: [refpolicy] Debian puts acct logs in /var/log/account

diff --git a/policy/modules/admin/acct.fc b/policy/modules/admin/acct.fc
index ab5b5e7..c0e01cb 100644
--- a/policy/modules/admin/acct.fc
+++ b/policy/modules/admin/acct.fc
@@ -5,4 +5,9 @@

/usr/sbin/accton -- gen_context(system_u:object_r:acct_exec_t,s0)

+ifdef(`distro_debian',`
+/var/log/account(/.*)? gen_context(system_u:object_r:acct_data_t,s0)
+', `
/var/account(/.*)? gen_context(system_u:object_r:acct_data_t,s0)
+')
+

--
Where's the man could ease a heart like a satin gown? Dorothy Parker,
"The Satin Dress"
Manoj Srivastava <[email protected]> <http://www.golden-gryphon.com/>
1024D/BF24424C print 4966 F272 D093 B493 410B 924B 21BA DABB BF24 424C

2009-07-14 12:53:04

by cpebenito

Subject: [refpolicy] Debian puts acct logs in /var/log/account

On Wed, 2009-07-01 at 09:59 -0500, Manoj Srivastava wrote:
> diff --git a/policy/modules/admin/acct.fc b/policy/modules/admin/acct.fc
> index ab5b5e7..c0e01cb 100644
> --- a/policy/modules/admin/acct.fc
> +++ b/policy/modules/admin/acct.fc
> @@ -5,4 +5,9 @@
>
> /usr/sbin/accton -- gen_context(system_u:object_r:acct_exec_t,s0)
>
> +ifdef(`distro_debian',`
> +/var/log/account(/.*)? gen_context(system_u:object_r:acct_data_t,s0)
> +', `
> /var/account(/.*)? gen_context(system_u:object_r:acct_data_t,s0)
> +')
> +

Merged without distro_debian.

--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150