[RFC] logging: tidy loose end related to systemd-journald

Dominick Grift <[email protected]>
Newsgroups org.kernel.vger.selinux-refpolicy
Message-ID <[email protected]>
RFC because I was unable to test this.

Signed-off-by: Dominick Grift <[email protected]>
---
 policy/modules/system/logging.if | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/policy/modules/system/logging.if b/policy/modules/system/logging.if
index 3dd2c06c2..6222fed4b 100644
--- a/policy/modules/system/logging.if
+++ b/policy/modules/system/logging.if
@@ -684,8 +684,8 @@ interface(`logging_send_syslog_msg',`
 	allow $1 devlog_t:sock_file write_sock_file_perms;
 
 	# systemd journal socket is in /run/systemd/journal/dev-log
+	write_sock_files_pattern($1, syslogd_runtime_t, syslogd_runtime_t)
 	init_search_run($1)
-	allow $1 syslogd_runtime_t:dir search_dir_perms;
 
 	# the type of socket depends on the syslog daemon
 	allow $1 syslogd_t:unix_dgram_socket sendto;
-- 
2.53.0
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.