diff --git a/logd.te b/logd.te index 9b1fdd3727f0f68d947f74a825f11985f9273b86..aa24c0531c1fcbc956bd7606e1160a38c8ea5801 100644 --- a/logd.te +++ b/logd.te @@ -4,6 +4,10 @@ type logd_exec, exec_type, file_type; init_daemon_domain(logd) +# Read access to pseudo filesystems. +r_dir_file(logd, proc) +r_dir_file(logd, proc_net) + allow logd self:capability { setuid setgid sys_nice audit_control }; allow logd self:capability2 syslog; allow logd self:netlink_audit_socket { create_socket_perms nlmsg_write };