From: srivasta@golden-gryphon.com (Manoj Srivastava)
Date: Wed, 01 Jul 2009 09:59:20 -0500
Subject: [refpolicy] Debian puts acct logs in /var/log/account
Message-ID: <87ljn8jvp3.fsf@anzu.internal.golden-gryphon.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com


diff --git a/policy/modules/admin/acct.fc b/policy/modules/admin/acct.fc
index ab5b5e7..c0e01cb 100644
--- a/policy/modules/admin/acct.fc
+++ b/policy/modules/admin/acct.fc
@@ -5,4 +5,9 @@
 
 /usr/sbin/accton       --      gen_context(system_u:object_r:acct_exec_t,s0)
 
+ifdef(`distro_debian',`
+/var/log/account(/.*)?  gen_context(system_u:object_r:acct_data_t,s0)
+', `
 /var/account(/.*)?             gen_context(system_u:object_r:acct_data_t,s0)
+')
+

-- 
Where's the man could ease a heart like a satin gown? Dorothy Parker,
"The Satin Dress"
Manoj Srivastava <srivasta@acm.org> <http://www.golden-gryphon.com/>  
1024D/BF24424C print 4966 F272 D093 B493 410B  924B 21BA DABB BF24 424C