## mlogc policy
##
##
## More descriptive text about mlogc. The desc
## tag can also use p, ul, and ol
## html tags for formatting.
##
##
## This policy supports the following mlogc features:
##
## - Feature A
## - Feature B
## - Feature C
##
##
##
#
########################################
##
## Execute a domain transition to run mlogc.
##
##
##
## Domain allowed to transition.
##
##
#
interface(`mlogc_domtrans',`
gen_require(`
type mlogc_t, mlogc_exec_t;
type httpd_t, httpd_exec_t;
role system_r;
')
domain_type(mlogc_t)
domain_entry_file(mlogc_t, mlogc_exec_t)
role system_r types mlogc_t;
domtrans_pattern($1, mlogc_exec_t, mlogc_t)
#domtrans_pattern($1,mlogc_exec_t,mlogc_t)
')
########################################
##
## Read mlogc log files.
##
##
##
## Domain allowed to read the log files.
##
##
#
interface(`mlogc_read_log',`
gen_require(`
type mlogc_log_t;
')
logging_search_logs($1)
allow $1 mlogc_log_t:file read_file_perms;
')
########################################
##
## Write mlogc log files.
##
##
##
## Domain allowed to write the log files.
##
##
#
interface(`mlogc_write_log',`
gen_require(`
type mlogc_log_t;
')
allow $1 mlogc_log_t:file write;
')