From mboxrd@z Thu Jan  1 00:00:00 1970
From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Tue, 6 Mar 2012 09:00:59 -0500
Subject: [refpolicy] [PATCH 1/1] Fix the symbol required in the
 clamav_append_log interface.
In-Reply-To: <1330597659-30214-1-git-send-email-qingtao.cao@windriver.com>
References: <1330597659-30214-1-git-send-email-qingtao.cao@windriver.com>
Message-ID: <4F56189B.3070906@tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On 03/01/12 05:27, Harry Ciao wrote:
> The label of clamd's log files is clamd_var_log_t instead of
> clamav_log_t, which in fact has not been defined by clamav.pp. If such
> un-decleared symbol is required by the clamav_append_log interface, the
> whole optional block that calls this interface would not be enabled as
> expected.

Merged.

> Signed-off-by: Harry Ciao <qingtao.cao@windriver.com>
> ---
>  clamav.if |    6 +++---
>  1 files changed, 3 insertions(+), 3 deletions(-)
> 
> diff --git a/clamav.if b/clamav.if
> index 1f11572..bbac14a 100644
> --- a/clamav.if
> +++ b/clamav.if
> @@ -49,12 +49,12 @@ interface(`clamav_stream_connect',`
>  #
>  interface(`clamav_append_log',`
>  	gen_require(`
> -		type clamav_log_t;
> +		type clamd_var_log_t;
>  	')
>  
>  	logging_search_logs($1)
> -	allow $1 clamav_log_t:dir list_dir_perms;
> -	append_files_pattern($1, clamav_log_t, clamav_log_t)
> +	allow $1 clamd_var_log_t:dir list_dir_perms;
> +	append_files_pattern($1, clamd_var_log_t, clamd_var_log_t)
>  ')
>  
>  ########################################


-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com