aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--policy/modules/system/logging.te6
-rw-r--r--policy/modules/system/systemd.if20
2 files changed, 26 insertions, 0 deletions
diff --git a/policy/modules/system/logging.te b/policy/modules/system/logging.te
index 19ef420f..d763b06e 100644
--- a/policy/modules/system/logging.te
+++ b/policy/modules/system/logging.te
@@ -232,6 +232,12 @@ optional_policy(`
')
optional_policy(`
+ init_list_unit_dirs(auditd_t)
+ systemd_start_power_units(auditd_t)
+ systemd_status_power_units(auditd_t)
+')
+
+optional_policy(`
udev_read_db(auditd_t)
')
diff --git a/policy/modules/system/systemd.if b/policy/modules/system/systemd.if
index 8f50e39e..4dd26458 100644
--- a/policy/modules/system/systemd.if
+++ b/policy/modules/system/systemd.if
@@ -821,6 +821,26 @@ interface(`systemd_start_power_units',`
########################################
## <summary>
+## Get the system status information about power units
+## </summary>
+## <param name="domain">
+## <summary>
+## Domain allowed access.
+## </summary>
+## </param>
+#
+interface(`systemd_status_power_units',`
+ gen_require(`
+ type power_unit_t;
+ class service status;
+ ')
+
+ allow $1 power_unit_t:service status;
+')
+
+
+########################################
+## <summary>
## Make the specified type usable for
## systemd tmpfiles config files.
## </summary>