Chris PeBenito e9c6cd
Chris PeBenito 79a5a8
policy_module(auditadm, 2.0.1)
Chris PeBenito e9c6cd
Chris PeBenito e9c6cd
########################################
Chris PeBenito e9c6cd
#
Chris PeBenito e9c6cd
# Declarations
Chris PeBenito e9c6cd
#
Chris PeBenito e9c6cd
Chris PeBenito e9c6cd
role auditadm_r;
Chris PeBenito e9c6cd
Chris PeBenito e9c6cd
userdom_unpriv_user_template(auditadm)
Chris PeBenito e9c6cd
Chris PeBenito e9c6cd
########################################
Chris PeBenito e9c6cd
#
Chris PeBenito e9c6cd
# Local policy
Chris PeBenito e9c6cd
#
Chris PeBenito e9c6cd
Chris PeBenito e9c6cd
allow auditadm_t self:capability { dac_read_search dac_override };
Chris PeBenito e9c6cd
Chris PeBenito 79a5a8
kernel_read_ring_buffer(auditadm_t)
Chris PeBenito 79a5a8
Chris PeBenito e9c6cd
corecmd_exec_shell(auditadm_t)
Chris PeBenito e9c6cd
Chris PeBenito e9c6cd
domain_kill_all_domains(auditadm_t)
Chris PeBenito e9c6cd
Chris PeBenito e9c6cd
logging_send_syslog_msg(auditadm_t)
Chris PeBenito e9c6cd
logging_read_generic_logs(auditadm_t)
Chris PeBenito e9c6cd
logging_manage_audit_log(auditadm_t)
Chris PeBenito e9c6cd
logging_manage_audit_config(auditadm_t)
Chris PeBenito 296273
logging_run_auditctl(auditadm_t, auditadm_r)
Chris PeBenito 296273
logging_run_auditd(auditadm_t, auditadm_r)
Chris PeBenito e9c6cd
Chris PeBenito 296273
seutil_run_runinit(auditadm_t, auditadm_r)
Chris PeBenito e9c6cd
seutil_read_bin_policy(auditadm_t)
Chris PeBenito e9c6cd
Chris PeBenito e9c6cd
optional_policy(`
Chris PeBenito e9c6cd
	consoletype_exec(auditadm_t)
Chris PeBenito e9c6cd
')
Chris PeBenito e9c6cd
Chris PeBenito e9c6cd
optional_policy(`
Chris PeBenito e9c6cd
	dmesg_exec(auditadm_t)
Chris PeBenito e9c6cd
')
Chris PeBenito e9c6cd
Chris PeBenito e9c6cd
optional_policy(`
Chris PeBenito 296273
	screen_role_template(auditadm, auditadm_r, auditadm_t)
Chris PeBenito 296273
')
Chris PeBenito 296273
Chris PeBenito 296273
optional_policy(`
Chris PeBenito 296273
	secadm_role_change(auditadm_r)
Chris PeBenito e9c6cd
')
Chris PeBenito e9c6cd
Chris PeBenito e9c6cd
optional_policy(`
Chris PeBenito 296273
	su_role_template(auditadm, auditadm_r, auditadm_t)
Chris PeBenito e9c6cd
')
Chris PeBenito e9c6cd
Chris PeBenito 296273
optional_policy(`
Chris PeBenito 296273
	sudo_role_template(auditadm, auditadm_r, auditadm_t)
Chris PeBenito 296273
')
Chris PeBenito 296273
Chris PeBenito 296273
optional_policy(`
Chris PeBenito 296273
	sysadm_role_change(auditadm_r)
Chris PeBenito 296273
')
Chris PeBenito 296273