From 38f587a9be51fd04ea74f053fb4661c3da2cb18a Mon Sep 17 00:00:00 2001 From: Dan Walsh Date: Fri, 18 Nov 2011 11:48:51 -0500 Subject: [PATCH] Allow mcelog_t to create dir and file in /var/run and label it correctly --- policy/modules/admin/mcelog.fc | 2 +- policy/modules/admin/mcelog.te | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/policy/modules/admin/mcelog.fc b/policy/modules/admin/mcelog.fc index 06412265..409bbfce 100644 --- a/policy/modules/admin/mcelog.fc +++ b/policy/modules/admin/mcelog.fc @@ -2,4 +2,4 @@ /var/log/mcelog.* -- gen_context(system_u:object_r:mcelog_log_t,s0) -/var/run/mcelog-client -s gen_context(system_u:object_r:mcelog_var_run_t,s0) +/var/run/mcelog.* gen_context(system_u:object_r:mcelog_var_run_t,s0) diff --git a/policy/modules/admin/mcelog.te b/policy/modules/admin/mcelog.te index ea06507f..8ddc0911 100644 --- a/policy/modules/admin/mcelog.te +++ b/policy/modules/admin/mcelog.te @@ -30,7 +30,7 @@ logging_log_filetrans(mcelog_t, mcelog_log_t, { file dir }) manage_files_pattern(mcelog_t, mcelog_var_run_t, mcelog_var_run_t) manage_dirs_pattern(mcelog_t, mcelog_var_run_t, mcelog_var_run_t) manage_sock_files_pattern(mcelog_t, mcelog_var_run_t, mcelog_var_run_t) -files_pid_filetrans(mcelog_t, mcelog_var_run_t, sock_file ) +files_pid_filetrans(mcelog_t, mcelog_var_run_t, { dir file sock_file } ) kernel_read_system_state(mcelog_t) -- 2.47.3