Added dac_override

This commit is contained in:
Eric Renfro 2015-11-09 02:51:59 -05:00
parent 977bb115b7
commit 9265dff6d1

View file

@ -1,5 +1,5 @@
policy_module(mlogc,1.0.41)
policy_module(mlogc,1.0.42)
########################################
#
@ -104,6 +104,8 @@ allow httpd_t mlogc_log_t:file { write create open };
#============= mlogc_t ==============
allow mlogc_t self:capability dac_override;
allow mlogc_t http_port_t:tcp_socket name_connect;
allow mlogc_t self:tcp_socket { write read };
allow mlogc_t self:tcp_socket { connect getopt getattr create setopt };