From c21246b17c574ea6e489f9376d3543c42dfa98bc Mon Sep 17 00:00:00 2001 From: Eric Renfro Date: Wed, 18 Nov 2015 21:19:44 -0500 Subject: [PATCH] Initial commit, 1.0.0 --- .gitignore | 4 ++++ ossec.fc | 11 +++++++++++ ossec.if | 1 + ossec.te | 14 ++++++++++++++ 4 files changed, 30 insertions(+) create mode 100644 .gitignore create mode 100644 ossec.fc create mode 100644 ossec.if create mode 100644 ossec.te diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..1c55f2a --- /dev/null +++ b/.gitignore @@ -0,0 +1,4 @@ +Makefile +tmp +*.pp + diff --git a/ossec.fc b/ossec.fc new file mode 100644 index 0000000..b17274a --- /dev/null +++ b/ossec.fc @@ -0,0 +1,11 @@ +# ossec executable will have: +# label: system_u:object_r:ossec_exec_t +# MLS sensitivity: s0 +# MCS categories: + +#/usr/bin/mlogc -- gen_context(system_u:object_r:mlogc_exec_t,s0) +#/var/log/mlogc(/.*)? gen_context(system_u:object_r:mlogc_log_t,s0) +#/var/log/mlogc/data(/.*)? gen_context(system_u:object_r:mlogc_log_t,s0) + +/var/ossec/log(/.*)? gen_context(system_u:object_r:var_log_t,s0) + diff --git a/ossec.if b/ossec.if new file mode 100644 index 0000000..3eb6a30 --- /dev/null +++ b/ossec.if @@ -0,0 +1 @@ +## diff --git a/ossec.te b/ossec.te new file mode 100644 index 0000000..bf24c9f --- /dev/null +++ b/ossec.te @@ -0,0 +1,14 @@ + +policy_module(ossec,1.0.0) + +######################################## +# +# Declarations +# + + +######################################## +# +# ossec local policy +# +