From: sven.vermeulen@siphos.be (Sven Vermeulen) Date: Thu, 12 Jul 2012 19:17:53 +0200 Subject: [refpolicy] [PATCH v4 1/5] Support log location for init script logging In-Reply-To: <1342113477-32751-1-git-send-email-sven.vermeulen@siphos.be> References: <1342113477-32751-1-git-send-email-sven.vermeulen@siphos.be> Message-ID: <1342113477-32751-2-git-send-email-sven.vermeulen@siphos.be> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Recent init script packages allow for logging init script progress (service start/stop state information, sometimes even duration, etc.) so we introduce an initrc_var_log_t logtype and allow initrc_t to manage this. Signed-off-by: Sven Vermeulen --- policy/modules/system/init.te | 7 +++++++ 1 files changed, 7 insertions(+), 0 deletions(-) diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te index 5fb9683..953d586 100644 --- a/policy/modules/system/init.te +++ b/policy/modules/system/init.te @@ -74,6 +74,9 @@ files_type(initrc_state_t) type initrc_tmp_t; files_tmp_file(initrc_tmp_t) +type initrc_var_log_t; +logging_log_file(initrc_var_log_t) + type initrc_var_run_t; files_pid_file(initrc_var_run_t) @@ -255,6 +258,10 @@ manage_dirs_pattern(initrc_t, initrc_tmp_t, initrc_tmp_t) manage_lnk_files_pattern(initrc_t, initrc_tmp_t, initrc_tmp_t) files_tmp_filetrans(initrc_t, initrc_tmp_t, { file dir }) +manage_dirs_pattern(initrc_t, initrc_var_log_t, initrc_var_log_t) +manage_files_pattern(initrc_t, initrc_var_log_t, initrc_var_log_t) +logging_log_filetrans(initrc_t, initrc_var_log_t, dir) + init_write_initctl(initrc_t) kernel_read_system_state(initrc_t) -- 1.7.8.6