From 6a800840bda95fca3ee5e723ae4c7ea0de9cf95f Mon Sep 17 00:00:00 2001 From: Zdenek Pytela Date: Wed, 18 Jan 2023 17:49:03 +0100 Subject: [PATCH] Allow icecast rename its log files This permission is required when icecast is configured with "logarchive 1" and the log file size reaches the "logsize" limit. Resolves: rhbz#2156763 --- policy/modules/contrib/icecast.te | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/contrib/icecast.te b/policy/modules/contrib/icecast.te index 23f8b5d4c7..33267a72fe 100644 --- a/policy/modules/contrib/icecast.te +++ b/policy/modules/contrib/icecast.te @@ -41,6 +41,7 @@ allow icecast_t self:tcp_socket { accept listen }; allow icecast_t icecast_log_t:dir setattr_dir_perms; append_files_pattern(icecast_t, icecast_log_t, icecast_log_t) create_files_pattern(icecast_t, icecast_log_t, icecast_log_t) +rename_files_pattern(icecast_t, icecast_log_t, icecast_log_t) setattr_files_pattern(icecast_t, icecast_log_t, icecast_log_t) manage_dirs_pattern(icecast_t, icecast_var_run_t, icecast_var_run_t)