commit: 6b7f2fdba7706b4859e2d63c4b8ef887b61d6bbd Author: Laurent Bigonville <bigon <AT> bigon <DOT> be> AuthorDate: Wed Dec 16 18:19:30 2015 +0000 Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org> CommitDate: Sat Jan 30 17:02:52 2016 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=6b7f2fdb
Allow syslogd_t to read sysctl_vm_overcommit_t policy/modules/system/logging.te | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/policy/modules/system/logging.te b/policy/modules/system/logging.te index 7b6b6fb..f2e4984 100644 --- a/policy/modules/system/logging.te +++ b/policy/modules/system/logging.te @@ -418,7 +418,8 @@ kernel_read_kernel_sysctls(syslogd_t) kernel_read_proc_symlinks(syslogd_t) # Allow access to /proc/kmsg for syslog-ng kernel_read_messages(syslogd_t) -kernel_read_vm_sysctls(syslogd_t) +# rsyslog +kernel_read_vm_overcommit_sysctl(syslogd_t) kernel_clear_ring_buffer(syslogd_t) kernel_change_ring_buffer_level(syslogd_t) # Read ring buffer for journald
