allow syslog-ng to setrlimit
PATCH 1/1 allow syslog-ng to setrlimit
syslog-ng wants to increase the number of permissible open files from 256 to 4096 on unix/linux systems.
Signed-off-by Chris Richards <[email protected]>
--- policy/modules/system/logging.te | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-)
policy/modules/system/logging.te +2 -1
@@ -342,7 +342,8 @@ optional_policy(` allow syslogd_t self:capability { dac_override sys_resource sys_tty_config net_admin sys_admin chown fsetid }; dontaudit syslogd_t self:capability sys_tty_config; # setpgid for metalog -allow syslogd_t self:process { signal_perms setpgid }; +# setrlimit for syslog-ng +allow syslogd_t self:process { signal_perms setpgid setrlimit }; # receive messages to be logged allow syslogd_t self:unix_dgram_socket create_socket_perms; allow syslogd_t self:unix_stream_socket create_stream_socket_perms;
Signature · 1 line
1.6.4.4
PATCH 1/1 allow syslog-ng to setrlimit
Quoted 1 line · Chris Richards
syslog-ng wants to increase the number of permissible open files from 256 to 4096 on unix/linux systems.
Merged.
Quoted 19 lines
Signed-off-by Chris Richards <[email protected]>--- policy/modules/system/logging.te | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-)policy/modules/system/logging.te +2
-1@@ -342,7 +342,8 @@ optional_policy(` allow syslogd_t self:capability { dac_override sys_resource sys_tty_config net_admin sys_admin chown fsetid }; dontaudit syslogd_t self:capability sys_tty_config; # setpgid for metalog -allow syslogd_t self:process { signal_perms setpgid }; +# setrlimit for syslog-ng +allow syslogd_t self:process { signal_perms setpgid setrlimit }; # receive messages to be logged allow syslogd_t self:unix_dgram_socket create_socket_perms; allow syslogd_t self:unix_stream_socket create_stream_socket_perms;
Signature · 7 lines
Chris PeBenito <[email protected]> Developer, Hardened Gentoo Linux Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243 Key fingerprint = B0E6 877A 883F A57A 8E6A CB00 BC8E E42D E6AF 9243