2012-09-14 11:24:04

by dominick.grift

[permalink] [raw]
Subject: [refpolicy] [PATCH] Remove var_log_t file context spec


The /var/cfengine/output location will be labeled in the forthcoming
cfengine policy module that will be ported from Fedora

Signed-off-by: Dominick Grift <[email protected]>
diff --git a/policy/modules/system/logging.fc b/policy/modules/system/logging.fc
index 02f4c97..e86d0d9 100644
--- a/policy/modules/system/logging.fc
+++ b/policy/modules/system/logging.fc
@@ -34,7 +34,6 @@

/var/axfrdns/log/main(/.*)? gen_context(system_u:object_r:var_log_t,s0)
/var/dnscache/log/main(/.*)? gen_context(system_u:object_r:var_log_t,s0)
-/var/cfengine/outputs(/.*)? gen_context(system_u:object_r:var_log_t,s0)

/var/log -d gen_context(system_u:object_r:var_log_t,s0-mls_systemhigh)
/var/log/.* gen_context(system_u:object_r:var_log_t,s0)


2012-10-02 15:01:25

by cpebenito

[permalink] [raw]
Subject: [refpolicy] [PATCH] Remove var_log_t file context spec

On 09/14/12 07:24, Dominick Grift wrote:
>
> The /var/cfengine/output location will be labeled in the forthcoming
> cfengine policy module that will be ported from Fedora
>
> Signed-off-by: Dominick Grift <[email protected]>
> diff --git a/policy/modules/system/logging.fc b/policy/modules/system/logging.fc
> index 02f4c97..e86d0d9 100644
> --- a/policy/modules/system/logging.fc
> +++ b/policy/modules/system/logging.fc
> @@ -34,7 +34,6 @@
>
> /var/axfrdns/log/main(/.*)? gen_context(system_u:object_r:var_log_t,s0)
> /var/dnscache/log/main(/.*)? gen_context(system_u:object_r:var_log_t,s0)
> -/var/cfengine/outputs(/.*)? gen_context(system_u:object_r:var_log_t,s0)
>
> /var/log -d gen_context(system_u:object_r:var_log_t,s0-mls_systemhigh)
> /var/log/.* gen_context(system_u:object_r:var_log_t,s0)

Merged.

--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com