selinux-policy/backport-Allow-icecast-rename-its-log-files.patch

26 lines
1.1 KiB
Diff

From 6a800840bda95fca3ee5e723ae4c7ea0de9cf95f Mon Sep 17 00:00:00 2001
From: Zdenek Pytela <zpytela@redhat.com>
Date: Wed, 18 Jan 2023 17:49:03 +0100
Subject: [PATCH] Allow icecast rename its log files
This permission is required when icecast is configured with
"logarchive 1" and the log file size reaches the "logsize" limit.
Resolves: rhbz#2156763
---
policy/modules/contrib/icecast.te | 1 +
1 file changed, 1 insertion(+)
diff --git a/policy/modules/contrib/icecast.te b/policy/modules/contrib/icecast.te
index 23f8b5d4c7..33267a72fe 100644
--- a/policy/modules/contrib/icecast.te
+++ b/policy/modules/contrib/icecast.te
@@ -41,6 +41,7 @@ allow icecast_t self:tcp_socket { accept listen };
allow icecast_t icecast_log_t:dir setattr_dir_perms;
append_files_pattern(icecast_t, icecast_log_t, icecast_log_t)
create_files_pattern(icecast_t, icecast_log_t, icecast_log_t)
+rename_files_pattern(icecast_t, icecast_log_t, icecast_log_t)
setattr_files_pattern(icecast_t, icecast_log_t, icecast_log_t)
manage_dirs_pattern(icecast_t, icecast_var_run_t, icecast_var_run_t)