logrotate needs to be able to send signals at all levels

diff --git a/policy/modules/admin/logrotate.te b/policy/modules/admin/logrotate.te
index 98f0a2e8e416713003ead2e8056d16aa82fe2ced..c1ccc06037b22be368d960cec8b24cc83c4b3fdc 100644 (file)
--- a/policy/modules/admin/logrotate.te
+++ b/policy/modules/admin/logrotate.te
@@ -77,6 +77,7 @@ fs_list_inotifyfs(logrotate_t)
 mls_file_read_all_levels(logrotate_t)
 mls_file_write_all_levels(logrotate_t)
 mls_file_upgrade(logrotate_t)
+mls_process_write_to_clearance(logrotate_t)
 
 selinux_get_fs_mount(logrotate_t)
 selinux_get_enforce_mode(logrotate_t)