diff options
| -rw-r--r-- | roles/base/files/selinux/rsyslog-audit.pp | bin | 0 -> 7609 bytes | |||
| -rw-r--r-- | roles/base/files/selinux/rsyslog-audit.te | 13 |
2 files changed, 4 insertions, 9 deletions
diff --git a/roles/base/files/selinux/rsyslog-audit.pp b/roles/base/files/selinux/rsyslog-audit.pp Binary files differnew file mode 100644 index 000000000..f1a417ff5 --- /dev/null +++ b/roles/base/files/selinux/rsyslog-audit.pp diff --git a/roles/base/files/selinux/rsyslog-audit.te b/roles/base/files/selinux/rsyslog-audit.te index 31f3a2221..a8bf497c2 100644 --- a/roles/base/files/selinux/rsyslog-audit.te +++ b/roles/base/files/selinux/rsyslog-audit.te @@ -1,15 +1,10 @@ module rsyslog-audit 1.0; require { - type audit_log_t; - class file search; -} - -require { - type audit_log_t; - class file ioctl; - class file open; - class file read; + type auditd_log_t; + type syslogd_t; + class file { getattr ioctl open read }; + class dir { getattr search }; } #============= syslogd_t ============== |