Signed-off-by: Dave Sugar <dsugar@xxxxxxxxxx> --- policy/modules/system/logging.if | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/policy/modules/system/logging.if b/policy/modules/system/logging.if index 16091eb6..21ec6501 100644 --- a/policy/modules/system/logging.if +++ b/policy/modules/system/logging.if @@ -1222,6 +1222,25 @@ interface(`logging_admin_audit',` dontaudit $1 auditd_log_t:file map; ') +######################################## +## <summary> +## Allow specified domain to check status of syslog unit +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access. +## </summary> +## </param> +# +interface(`logging_status_syslog',` + gen_require(` + type syslogd_unit_t; + class service status; + ') + + allow $1 syslogd_unit_t:service status; +') + ######################################## ## <summary> ## All of the rules required to administrate -- 2.20.1
