Sysstat patch from Dan Walsh.

This commit is contained in:
Chris PeBenito 2010-03-22 10:47:41 -04:00
parent 98ac3f5ace
commit 08d7c7339b

View File

@ -1,5 +1,5 @@
policy_module(sysstat, 1.5.0)
policy_module(sysstat, 1.5.1)
########################################
#
@ -19,14 +19,15 @@ logging_log_file(sysstat_log_t)
# Local policy
#
allow sysstat_t self:capability { sys_resource sys_tty_config };
allow sysstat_t self:capability { dac_override sys_resource sys_tty_config };
dontaudit sysstat_t self:capability sys_admin;
allow sysstat_t self:fifo_file rw_fifo_file_perms;
can_exec(sysstat_t, sysstat_exec_t)
manage_dirs_pattern(sysstat_t,sysstat_log_t,sysstat_log_t)
manage_files_pattern(sysstat_t, sysstat_log_t, sysstat_log_t)
read_lnk_files_pattern(sysstat_t, sysstat_log_t, sysstat_log_t)
manage_lnk_files_pattern(sysstat_t,sysstat_log_t,sysstat_log_t)
logging_log_filetrans(sysstat_t, sysstat_log_t, { file dir })
# get info from /proc