Updated based on feedback. Signed-off-by: Dave Sugar <dsugar@xxxxxxxxxx> --- policy/modules/system/logging.if | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/policy/modules/system/logging.if b/policy/modules/system/logging.if index 16091eb6..c86c4bd9 100644 --- a/policy/modules/system/logging.if +++ b/policy/modules/system/logging.if @@ -427,6 +427,25 @@ interface(`logging_domtrans_syslog',` ') ') +######################################## +## <summary> +## Allow specified domain to check status of syslog unit +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access. +## </summary> +## </param> +# +interface(`logging_status_syslog',` + gen_require(` + type syslogd_unit_t; + class service status; + ') + + allow $1 syslogd_unit_t:service status; +') + ######################################## ## <summary> ## Set the attributes of syslog temporary files. -- 2.20.1
