On Mon, 2019-02-18 at 20:00 +0000, Sugar, David wrote: > Signed-off-by: Dave Sugar <dsugar@xxxxxxxxxx> > --- > policy/modules/system/logging.if | 19 +++++++++++++++++++ > 1 file changed, 19 insertions(+) > > diff --git a/policy/modules/system/logging.if > b/policy/modules/system/logging.if > index 16091eb6..21ec6501 100644 > --- a/policy/modules/system/logging.if > +++ b/policy/modules/system/logging.if > @@ -1222,6 +1222,25 @@ interface(`logging_admin_audit',` > dontaudit $1 auditd_log_t:file map; > ') > > +######################################## > +## <summary> > +## Allow specified domain to check status of syslog unit > +## </summary> > +## <param name="domain"> > +## <summary> > +## Domain allowed access. > +## </summary> > +## </param> > +# > +interface(`logging_status_syslog',` > + gen_require(` > + type syslogd_unit_t; > + class service status; > + ') > + > + allow $1 syslogd_unit_t:service status; > +') > + > ######################################## > ## <summary> > ## All of the rules required to administrate This should be up after logging_domtrans_syslog(). -- Chris PeBenito
