Oreon-Lime-R2/selinux-policy/selinux-policy-d9f4a2b/selinux-policy-d9f4a2bbeb91fd95d0c35a90936efb9ea99d2455/policy/modules/roles/sysadm_secadm.te

25 lines
452 B
Text

policy_module(sysadm_secadm, 1.0.0)
########################################
#
# Declarations
#
gen_require(`
type sysadm_t;
role sysadm_r;
')
userdom_security_admin_template(sysadm_t, sysadm_r)
#######################################
#
# Local policy
#
mls_file_write_all_levels(sysadm_t)
logging_manage_audit_log(sysadm_t)
logging_manage_audit_config(sysadm_t)
logging_run_auditctl(sysadm_t, sysadm_r)
logging_stream_connect_syslog(sysadm_t)