From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Tue, 14 Jul 2009 08:53:04 -0400
Subject: [refpolicy] Debian puts acct logs in /var/log/account
In-Reply-To: <87ljn8jvp3.fsf@anzu.internal.golden-gryphon.com>
References: <87ljn8jvp3.fsf@anzu.internal.golden-gryphon.com>
Message-ID: <1247575984.31521.42.camel@gorn.columbia.tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Wed, 2009-07-01 at 09:59 -0500, Manoj Srivastava wrote:
> diff --git a/policy/modules/admin/acct.fc b/policy/modules/admin/acct.fc
> index ab5b5e7..c0e01cb 100644
> --- a/policy/modules/admin/acct.fc
> +++ b/policy/modules/admin/acct.fc
> @@ -5,4 +5,9 @@
>  
>  /usr/sbin/accton       --      gen_context(system_u:object_r:acct_exec_t,s0)
>  
> +ifdef(`distro_debian',`
> +/var/log/account(/.*)?  gen_context(system_u:object_r:acct_data_t,s0)
> +', `
>  /var/account(/.*)?             gen_context(system_u:object_r:acct_data_t,s0)
> +')
> +

Merged without distro_debian.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150