[selinux-policy/master_contrib: 27/47] Allow devicekit_power_t to manage its log files

Miroslav Grepl mgrepl at fedoraproject.org
Wed Jan 16 13:32:46 UTC 2013


commit e5b01e8af5450b6c5aaf2288b268f87c9ce47942
Author: Dan Walsh <dwalsh at redhat.com>
Date:   Mon Jan 14 11:58:36 2013 -0500

    Allow devicekit_power_t to manage its log files

 devicekit.te |    4 +---
 1 files changed, 1 insertions(+), 3 deletions(-)
---
diff --git a/devicekit.te b/devicekit.te
index 979a3de..41ca7ce 100644
--- a/devicekit.te
+++ b/devicekit.te
@@ -222,9 +222,7 @@ manage_dirs_pattern(devicekit_power_t, devicekit_var_lib_t, devicekit_var_lib_t)
 manage_files_pattern(devicekit_power_t, devicekit_var_lib_t, devicekit_var_lib_t)
 files_var_lib_filetrans(devicekit_power_t, devicekit_var_lib_t, dir)
 
-allow devicekit_power_t devicekit_var_log_t:file append_file_perms;
-allow devicekit_power_t devicekit_var_log_t:file create_file_perms;
-allow devicekit_power_t devicekit_var_log_t:file setattr_file_perms;
+manage_files_pattern(devicekit_power_t, devicekit_var_log_t, devicekit_var_log_t)
 logging_log_filetrans(devicekit_power_t, devicekit_var_log_t, file)
 
 manage_dirs_pattern(devicekit_power_t, devicekit_var_run_t, devicekit_var_run_t)


More information about the scm-commits mailing list