selinux-policy/strict/file_contexts/program/logrotate.fc

14 lines
610 B
Plaintext
Raw Normal View History

2005-04-29 17:45:15 +00:00
# logrotate
/usr/sbin/logrotate -- system_u:object_r:logrotate_exec_t
/usr/sbin/logcheck -- system_u:object_r:logrotate_exec_t
ifdef(`distro_debian', `
/usr/bin/savelog -- system_u:object_r:logrotate_exec_t
/var/lib/logrotate(/.*)? system_u:object_r:logrotate_var_lib_t
', `
/var/lib/logrotate\.status -- system_u:object_r:logrotate_var_lib_t
')
/etc/cron\.(daily|weekly)/sysklogd -- system_u:object_r:logrotate_exec_t
/var/lib/logcheck(/.*)? system_u:object_r:logrotate_var_lib_t
# using a hard-coded name under /var/tmp is a bug - new version fixes it
/var/tmp/logcheck -d system_u:object_r:logrotate_tmp_t