On Wed, 2019-02-20 at 16:37 +0000, Sugar, David wrote: > Updated based on feedback. > > Signed-off-by: Dave Sugar <dsugar@xxxxxxxxxx> > --- > policy/modules/system/logging.if | 19 +++++++++++++++++++ > 1 file changed, 19 insertions(+) > > diff --git a/policy/modules/system/logging.if > b/policy/modules/system/logging.if > index 16091eb6..c86c4bd9 100644 > --- a/policy/modules/system/logging.if > +++ b/policy/modules/system/logging.if > @@ -427,6 +427,25 @@ interface(`logging_domtrans_syslog',` > ') > ') > > +######################################## > +## <summary> > +## Allow specified domain to check status of syslog unit > +## </summary> > +## <param name="domain"> > +## <summary> > +## Domain allowed access. > +## </summary> > +## </param> > +# > +interface(`logging_status_syslog',` > + gen_require(` > + type syslogd_unit_t; > + class service status; > + ') > + > + allow $1 syslogd_unit_t:service status; > +') > + > ######################################## > ## <summary> > ## Set the attributes of syslog temporary files. Merged. -- Chris PeBenito
