diff --git a/INSTALL/misplogrotate.te b/INSTALL/misplogrotate.te index 4e3f35a7b..921989772 100644 --- a/INSTALL/misplogrotate.te +++ b/INSTALL/misplogrotate.te @@ -1,8 +1,9 @@ -module misplogrotate 1.1; +module misplogrotate 1.2; require { type httpd_t; type logrotate_t; type httpd_log_t; + type httpd_sys_script_t; type httpd_sys_content_t; type httpd_sys_rw_content_t; class dir { ioctl read getattr lock search open remove_name }; @@ -12,4 +13,4 @@ require { allow logrotate_t httpd_sys_content_t:dir { ioctl read getattr lock search open }; allow logrotate_t httpd_sys_rw_content_t:dir { ioctl read getattr lock search open }; allow httpd_t httpd_log_t:dir remove_name; -allow httpd_t httpd_log_t:file { unlink write }; +allow { httpd_t httpd_sys_script_t } httpd_log_t:file { unlink write };