CBL-Mariner/SPECS/selinux-policy/0002-Temporary-fix-for-wron...

30 lines
1.0 KiB
Diff

From 3b10bf42d5b6fb83d4dbe78ebe5655b4ba8e8083 Mon Sep 17 00:00:00 2001
From: Chris PeBenito <Christopher.PeBenito@microsoft.com>
Date: Wed, 1 Sep 2021 20:29:04 +0000
Subject: [PATCH 02/35] Temporary fix for wrong audit log directory
---
policy/modules/system/logging.fc | 4 ++++
1 file changed, 4 insertions(+)
MSFT_TAG: not upstreamable
diff --git a/policy/modules/system/logging.fc b/policy/modules/system/logging.fc
index 5681acb51..5cbad8178 100644
--- a/policy/modules/system/logging.fc
+++ b/policy/modules/system/logging.fc
@@ -68,6 +68,10 @@ ifdef(`distro_redhat',`
/var/named/chroot/dev/log -s gen_context(system_u:object_r:devlog_t,s0)
')
+ifdef(`distro_mariner',`
+/var/opt/audit/log(/.*)? gen_context(system_u:object_r:auditd_log_t,mls_systemhigh)
+')
+
/run/audit_events -s gen_context(system_u:object_r:auditd_runtime_t,mls_systemhigh)
/run/audispd_events -s gen_context(system_u:object_r:audisp_runtime_t,mls_systemhigh)
/run/auditd\.pid -- gen_context(system_u:object_r:auditd_runtime_t,mls_systemhigh)
--
2.34.1