20 lines
338 B
Plaintext
20 lines
338 B
Plaintext
|
policy_module(logadm, 1.0.0)
|
||
|
|
|
||
|
|
########################################
|
||
|
|
#
|
||
|
|
# Declarations
|
||
|
|
#
|
||
|
|
|
||
|
|
role logadm_r;
|
||
|
|
|
||
|
|
userdom_base_user_template(logadm)
|
||
|
|
|
||
|
|
########################################
|
||
|
|
#
|
||
|
|
# logadmin local policy
|
||
|
|
#
|
||
|
|
|
||
|
|
allow logadm_t self:capability { dac_override dac_read_search kill sys_ptrace sys_nice };
|
||
|
|
|
||
|
|
logging_admin(logadm_t, logadm_r)
|