From: srivasta@golden-gryphon.com (Manoj Srivastava) Date: Wed, 01 Jul 2009 09:59:20 -0500 Subject: [refpolicy] Debian puts acct logs in /var/log/account Message-ID: <87ljn8jvp3.fsf@anzu.internal.golden-gryphon.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com diff --git a/policy/modules/admin/acct.fc b/policy/modules/admin/acct.fc index ab5b5e7..c0e01cb 100644 --- a/policy/modules/admin/acct.fc +++ b/policy/modules/admin/acct.fc @@ -5,4 +5,9 @@ /usr/sbin/accton -- gen_context(system_u:object_r:acct_exec_t,s0) +ifdef(`distro_debian',` +/var/log/account(/.*)? gen_context(system_u:object_r:acct_data_t,s0) +', ` /var/account(/.*)? gen_context(system_u:object_r:acct_data_t,s0) +') + -- Where's the man could ease a heart like a satin gown? Dorothy Parker, "The Satin Dress" Manoj Srivastava 1024D/BF24424C print 4966 F272 D093 B493 410B 924B 21BA DABB BF24 424C