commit:     d3ad3fd3b22e7728874b475230d164f08e33c817
Author:     Elia Pinto <andronicus.spiros <AT> gmail <DOT> com>
AuthorDate: Tue Jun 10 15:22:47 2014 +0000
Commit:     Sven Vermeulen <swift <AT> gentoo <DOT> org>
CommitDate: Wed Jun 25 19:04:41 2014 +0000
URL:        
http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=d3ad3fd3

apache.te: Add labelling support for /var/log/mlogc

Add the right labelling support for the
ModSecurity Audit Log Collector(mlogc).
mlogc is started by apache and run with the
same selinux security context.

Signed-off-by: Elia Pinto <andronicus.spiros <AT> gmail.com>

---
 policy/modules/contrib/apache.fc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/contrib/apache.fc b/policy/modules/contrib/apache.fc
index ab4a625..818e177 100644
--- a/policy/modules/contrib/apache.fc
+++ b/policy/modules/contrib/apache.fc
@@ -124,6 +124,7 @@ ifdef(`distro_suse',`
 /var/log/cherokee(/.*)?        gen_context(system_u:object_r:httpd_log_t,s0)
 /var/log/dirsrv/admin-serv(/.*)?       
gen_context(system_u:object_r:httpd_log_t,s0)
 /var/log/glpi(/.*)?    gen_context(system_u:object_r:httpd_log_t,s0)
+/var/log/mlogc(/.*)?   gen_context(system_u:object_r:httpd_sys_rw_content_t,s0)
 /var/log/httpd(/.*)?   gen_context(system_u:object_r:httpd_log_t,s0)
 /var/log/horde2(/.*)?  gen_context(system_u:object_r:httpd_log_t,s0)
 /var/log/lighttpd(/.*)?        gen_context(system_u:object_r:httpd_log_t,s0)

Reply via email to