[refpolicy] [PATCH v2] apache.te: Add labelling support for /var/log/mlogc

[cpebenito@tresys.com (Christopher J. PeBenito)]

On 06/10/2014 11:22 AM, Elia Pinto wrote:
> Add the right labelling support for the
> ModSecurity Audit Log Collector(mlogc).
> mlogc is started by apache and run with the
> same selinux security context.
> 
> Signed-off-by: Elia Pinto <andronicus.spiros@gmail.com>
> ---
> This is the second revision. httpd_log_t context was not 
> sufficient for mlogc
> 
> I'm sorry for the noice, eventually, but I'm not sure that the patch has arrived on the mailing list 
> and so i send it back from another account for safety.
>  apache.fc |    1 +
>  1 file changed, 1 insertion(+)
> 
> diff --git a/apache.fc b/apache.fc
> index 4e90b04..ec0c0fb 100644
> --- a/apache.fc
> +++ b/apache.fc
> @@ -125,6 +125,7 @@ ifdef(`distro_suse',`
>  /var/log/cherokee(/.*)?	gen_context(system_u:object_r:httpd_log_t,s0)
>  /var/log/dirsrv/admin-serv(/.*)?	gen_context(system_u:object_r:httpd_log_t,s0)
>  /var/log/glpi(/.*)?	gen_context(system_u:object_r:httpd_log_t,s0)
> +/var/log/mlogc(/.*)?	gen_context(system_u:object_r:httpd_sys_rw_content_t,s0)
>  /var/log/httpd(/.*)?	gen_context(system_u:object_r:httpd_log_t,s0)
>  /var/log/horde2(/.*)?	gen_context(system_u:object_r:httpd_log_t,s0)
>  /var/log/lighttpd(/.*)?	gen_context(system_u:object_r:httpd_log_t,s0)
 
Merged.

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com