summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPatrick Uiterwijk <puiterwijk@redhat.com>2017-05-04 14:12:56 +0000
committerPatrick Uiterwijk <puiterwijk@redhat.com>2017-05-04 14:12:56 +0000
commitf4ae8df39d5f6158a4d783e92b0d4bfefdb9f83f (patch)
tree657dd7eda57b5ba4493cc291fdb9372cdfd84ec1
parentfcf570d42e9a4754b6c8c7acccd2ef4569da7f71 (diff)
downloadansible-f4ae8df39d5f6158a4d783e92b0d4bfefdb9f83f.tar.gz
ansible-f4ae8df39d5f6158a4d783e92b0d4bfefdb9f83f.tar.xz
ansible-f4ae8df39d5f6158a4d783e92b0d4bfefdb9f83f.zip
Fix up policy source and add EL6 compiled version
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
-rw-r--r--roles/base/files/selinux/rsyslog-audit.ppbin0 -> 7609 bytes
-rw-r--r--roles/base/files/selinux/rsyslog-audit.te13
2 files changed, 4 insertions, 9 deletions
diff --git a/roles/base/files/selinux/rsyslog-audit.pp b/roles/base/files/selinux/rsyslog-audit.pp
new file mode 100644
index 000000000..f1a417ff5
--- /dev/null
+++ b/roles/base/files/selinux/rsyslog-audit.pp
Binary files differ
diff --git a/roles/base/files/selinux/rsyslog-audit.te b/roles/base/files/selinux/rsyslog-audit.te
index 31f3a2221..a8bf497c2 100644
--- a/roles/base/files/selinux/rsyslog-audit.te
+++ b/roles/base/files/selinux/rsyslog-audit.te
@@ -1,15 +1,10 @@
module rsyslog-audit 1.0;
require {
- type audit_log_t;
- class file search;
-}
-
-require {
- type audit_log_t;
- class file ioctl;
- class file open;
- class file read;
+ type auditd_log_t;
+ type syslogd_t;
+ class file { getattr ioctl open read };
+ class dir { getattr search };
}
#============= syslogd_t ==============