From: dominick.grift@gmail.com (Dominick Grift)
Date: Tue, 19 Nov 2013 09:44:26 +0100
Subject: [refpolicy] [PATCH] Label /etc/cron.daily/logrotate correctly.
In-Reply-To: <1384692787-9565-1-git-send-email-aranea@aixah.de>
References: <1384692787-9565-1-git-send-email-aranea@aixah.de>
Message-ID: <1384850666.3080.6.camel@d30>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Sun, 2013-11-17 at 13:53 +0100, Luis Ressel wrote:
> This is used at least on Gentoo, but I could imagine this also exists on
> other distros.
> ---
>  logrotate.fc | 1 +
>  1 file changed, 1 insertion(+)
> 
> diff --git a/logrotate.fc b/logrotate.fc
> index a11d5be..207ec10 100644
> --- a/logrotate.fc
> +++ b/logrotate.fc
> @@ -1,3 +1,4 @@
> +/etc/cron\.(daily|weekly)/logrotate	--	gen_context(system_u:object_r:logrotate_exec_t,s0)
>  /etc/cron\.(daily|weekly)/sysklogd	--	gen_context(system_u:object_r:logrotate_exec_t,s0)
>  
>  /usr/sbin/logrotate	--	gen_context(system_u:object_r:logrotate_exec_t,s0)


Thanks, Applied