[selinux-policy: 155/3172] add iface creating private logs

[Daniel J Walsh]

commit fb1aee72f4dd6c578f3848ae4a8b30eb22000aa0
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Wed May 11 20:54:14 2005 +0000

    add iface creating private logs

 refpolicy/policy/modules/system/logging.if |   19 +++++++++++++++++++
 1 files changed, 19 insertions(+), 0 deletions(-)
---
diff --git a/refpolicy/policy/modules/system/logging.if b/refpolicy/policy/modules/system/logging.if
index 9b15f3a..39968a9 100644
--- a/refpolicy/policy/modules/system/logging.if
+++ b/refpolicy/policy/modules/system/logging.if
@@ -14,6 +14,25 @@ define(`logging_make_log_file_depend',`
 attribute logfile;
 ')
 
+########################################
+#
+# logging_create_private_log(domain,privatetype,[class(es)])
+#
+define(`logging_create_private_log',`
+requires_block_template(`$0'_depend)
+allow $1 var_log_t:dir { getattr search read write add_name remove_name };
+ifelse(`$3',`',`
+type_transition $1 var_log_t:file $2;
+',`
+type_transition $1 var_log_t:$3 $2;
+') dnl end ifelse
+')
+
+define(`logging_create_private_log_depend',`
+type var_log_t;
+class dir { getattr search read write add_name remove_name };
+')
+
 #######################################
 #
 # logging_send_system_log_message(domain)