Created
January 12, 2014 17:56
-
-
Save phips/8388109 to your computer and use it in GitHub Desktop.
Allow logwatch to write to an NFS mounted directory
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
module logwatch_nfs_write 1.0; | |
require { | |
type logwatch_t; | |
type nfs_t; | |
class dir write; | |
} | |
#============= logwatch_t ============== | |
#!!!! The source type 'logwatch_t' can write to a 'dir' of the following types: | |
# var_lock_t, tmp_t, logwatch_cache_t, logwatch_tmp_t, var_run_t | |
allow logwatch_t nfs_t:dir write; |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment