MISP/INSTALL/misplogrotate.te

module misplogrotate 1.1;
require {
	type httpd_t;
	type logrotate_t;
	type httpd_log_t;
	type httpd_sys_content_t;
	type httpd_sys_rw_content_t;
	class dir { ioctl read getattr lock search open remove_name };
	class file { unlink write };
}
#============= logrotate_t ==============
allow logrotate_t httpd_sys_content_t:dir { ioctl read getattr lock search open };
allow logrotate_t httpd_sys_rw_content_t:dir { ioctl read getattr lock search open };
allow httpd_t httpd_log_t:dir remove_name;
allow httpd_t httpd_log_t:file { unlink write };