aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorPetr Vorel <pvorel@suse.cz>2018-11-12 09:47:30 +0100
committerJason Zaman <jason@perfinion.com>2018-11-18 18:56:47 +0800
commit1ec76423aa4ac2c17b12e6a69a2887c47bffac1c (patch)
tree9639d9f1f7fbb5eb705aad4f5fa0971148b7ce5e
parentAllow minissdpd_t to create a unix_stream_socket (diff)
downloadhardened-refpolicy-1ec76423aa4ac2c17b12e6a69a2887c47bffac1c.tar.gz
hardened-refpolicy-1ec76423aa4ac2c17b12e6a69a2887c47bffac1c.tar.bz2
hardened-refpolicy-1ec76423aa4ac2c17b12e6a69a2887c47bffac1c.zip
dnsmasq: Require log files to have .log suffix
+ allow log rotate as well. Signed-off-by: Petr Vorel <pvorel@suse.cz> Signed-off-by: Jason Zaman <jason@perfinion.com>
-rw-r--r--policy/modules/services/dnsmasq.fc2
1 files changed, 1 insertions, 1 deletions
diff --git a/policy/modules/services/dnsmasq.fc b/policy/modules/services/dnsmasq.fc
index 278b880f..bfa87f4c 100644
--- a/policy/modules/services/dnsmasq.fc
+++ b/policy/modules/services/dnsmasq.fc
@@ -16,7 +16,7 @@
/var/lib/misc/dnsmasq\.leases -- gen_context(system_u:object_r:dnsmasq_lease_t,s0)
/var/lib/dnsmasq(/.*)? gen_context(system_u:object_r:dnsmasq_lease_t,s0)
-/var/log/dnsmasq.* -- gen_context(system_u:object_r:dnsmasq_var_log_t,s0)
+/var/log/dnsmasq(.*)?\.log(\..+) -- gen_context(system_u:object_r:dnsmasq_var_log_t,s0)
ifdef(`distro_gentoo',`
# Fix bug 531836 - Needed to support dnssec in dnsmasq