Douglas Schilling Landgraf has uploaded a new change for review.
Change subject: semodule: syslogd_t tmpfs_t:file read
......................................................................
semodule: syslogd_t tmpfs_t:file read
fix avc:
type=AVC msg=audit(1427483370.455:55): avc: denied { read } for pid=1889
comm="rsyslogd" name="resolv.conf"
dev="tmpfs" ino=21444 scontext=system_u:system_r:syslogd_t:s0
tcontext=system_u:object_r:tmpfs_t:s0 tclass=file
Change-Id: Idc15f2e1b87c74e2d71debf430cc5e75b6d54d46
Signed-off-by: Douglas Schilling Landgraf <[email protected]>
---
M semodule/ovirt.te.in
1 file changed, 1 insertion(+), 0 deletions(-)
git pull ssh://gerrit.ovirt.org:29418/ovirt-node refs/changes/16/44716/1
diff --git a/semodule/ovirt.te.in b/semodule/ovirt.te.in
index 2ead938..5d81534 100644
--- a/semodule/ovirt.te.in
+++ b/semodule/ovirt.te.in
@@ -245,6 +245,7 @@
#============= syslogd_t ==============
allow syslogd_t var_lib_t:file { write getattr open };
+allow syslogd_t tmpfs_t:file read;
#============= sysstat_t ==============
--
To view, visit https://gerrit.ovirt.org/44716
To unsubscribe, visit https://gerrit.ovirt.org/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: Idc15f2e1b87c74e2d71debf430cc5e75b6d54d46
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-node
Gerrit-Branch: ovirt-3.5
Gerrit-Owner: Douglas Schilling Landgraf <[email protected]>
_______________________________________________
node-patches mailing list
[email protected]
http://lists.ovirt.org/mailman/listinfo/node-patches
