From: dsugar@tresys.com (David Sugar) Date: Mon, 4 Dec 2017 21:34:59 +0000 Subject: [refpolicy] [PATCH 1/1] Allow dbus to write to xserver_log_t Message-ID: To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Allow dbus to write the the xserver log type=AVC msg=audit(1511920435.381:102): avc: denied { write } for pid=904 comm="dbus-daemon" path="/var/log/lightdm/seat0-greeter.log" dev="dm-0" ino=17320832 scontext=system_u:system_r:xdm_dbusd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xserver_log_t:s0 tclass=file --- dbus.te | 1 + 1 file changed, 1 insertion(+) diff --git a/dbus.te b/dbus.te index 5f2199c..015f1e1 100644 --- a/dbus.te +++ b/dbus.te @@ -274,6 +274,7 @@ optional_policy(` xserver_rw_xsession_log(session_bus_type) xserver_use_xdm_fds(session_bus_type) xserver_rw_xdm_pipes(session_bus_type) + xserver_write_log(session_bus_type) ') ######################################## -- 2.13.6