: patch to allow the audit dispatcher to read the system state
PATCH 25/34 : patch to allow the audit dispatcher to read the system state
This patch allows the audit dispatcher to read the system state.
policy/modules/system/logging.te +2 -0
@@ -226,6 +226,8 @@ allow audisp_t auditd_t:unix_stream_sock manage_sock_files_pattern(audisp_t, audisp_var_run_t, audisp_var_run_t) files_pid_filetrans(audisp_t, audisp_var_run_t, sock_file) +kernel_read_system_state(audisp_t) + corecmd_exec_bin(audisp_t) corecmd_exec_shell(audisp_t)
PATCH 25/34 : patch to allow the audit dispatcher to read the system state
Quoted 7 lines · Guido Trentalancia
This patch allows the audit dispatcher to read the system state.
diff -pruN -x booleans.conf -x corenetwork.if -x corenetwork.te -x modules.conf refpolicy-git-02022011/policy/modules/system/logging.te refpolicy-git-02022011-new/policy/modules/system/logging.te
policy/modules/system/logging.te allow audisp_t auditd_t:unix_stream_sock · line 232
Quoted 7 lines
policy/modules/system/logging.te +2
-0@@ -226,6 +226,8 @@ allow audisp_t auditd_t:unix_stream_sock manage_sock_files_pattern(audisp_t, audisp_var_run_t, audisp_var_run_t) files_pid_filetrans(audisp_t, audisp_var_run_t, sock_file) +kernel_read_system_state(audisp_t) + corecmd_exec_bin(audisp_t) corecmd_exec_shell(audisp_t)
Merged.
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com