|
Chris PeBenito |
e9c6cd |
|
|
Chris PeBenito |
79a5a8 |
policy_module(auditadm, 2.0.1)
|
|
Chris PeBenito |
e9c6cd |
|
|
Chris PeBenito |
e9c6cd |
########################################
|
|
Chris PeBenito |
e9c6cd |
#
|
|
Chris PeBenito |
e9c6cd |
# Declarations
|
|
Chris PeBenito |
e9c6cd |
#
|
|
Chris PeBenito |
e9c6cd |
|
|
Chris PeBenito |
e9c6cd |
role auditadm_r;
|
|
Chris PeBenito |
e9c6cd |
|
|
Chris PeBenito |
e9c6cd |
userdom_unpriv_user_template(auditadm)
|
|
Chris PeBenito |
e9c6cd |
|
|
Chris PeBenito |
e9c6cd |
########################################
|
|
Chris PeBenito |
e9c6cd |
#
|
|
Chris PeBenito |
e9c6cd |
# Local policy
|
|
Chris PeBenito |
e9c6cd |
#
|
|
Chris PeBenito |
e9c6cd |
|
|
Chris PeBenito |
e9c6cd |
allow auditadm_t self:capability { dac_read_search dac_override };
|
|
Chris PeBenito |
e9c6cd |
|
|
Chris PeBenito |
79a5a8 |
kernel_read_ring_buffer(auditadm_t)
|
|
Chris PeBenito |
79a5a8 |
|
|
Chris PeBenito |
e9c6cd |
corecmd_exec_shell(auditadm_t)
|
|
Chris PeBenito |
e9c6cd |
|
|
Chris PeBenito |
e9c6cd |
domain_kill_all_domains(auditadm_t)
|
|
Chris PeBenito |
e9c6cd |
|
|
Chris PeBenito |
e9c6cd |
logging_send_syslog_msg(auditadm_t)
|
|
Chris PeBenito |
e9c6cd |
logging_read_generic_logs(auditadm_t)
|
|
Chris PeBenito |
e9c6cd |
logging_manage_audit_log(auditadm_t)
|
|
Chris PeBenito |
e9c6cd |
logging_manage_audit_config(auditadm_t)
|
|
Chris PeBenito |
296273 |
logging_run_auditctl(auditadm_t, auditadm_r)
|
|
Chris PeBenito |
296273 |
logging_run_auditd(auditadm_t, auditadm_r)
|
|
Chris PeBenito |
e9c6cd |
|
|
Chris PeBenito |
296273 |
seutil_run_runinit(auditadm_t, auditadm_r)
|
|
Chris PeBenito |
e9c6cd |
seutil_read_bin_policy(auditadm_t)
|
|
Chris PeBenito |
e9c6cd |
|
|
Chris PeBenito |
e9c6cd |
optional_policy(`
|
|
Chris PeBenito |
e9c6cd |
consoletype_exec(auditadm_t)
|
|
Chris PeBenito |
e9c6cd |
')
|
|
Chris PeBenito |
e9c6cd |
|
|
Chris PeBenito |
e9c6cd |
optional_policy(`
|
|
Chris PeBenito |
e9c6cd |
dmesg_exec(auditadm_t)
|
|
Chris PeBenito |
e9c6cd |
')
|
|
Chris PeBenito |
e9c6cd |
|
|
Chris PeBenito |
e9c6cd |
optional_policy(`
|
|
Chris PeBenito |
296273 |
screen_role_template(auditadm, auditadm_r, auditadm_t)
|
|
Chris PeBenito |
296273 |
')
|
|
Chris PeBenito |
296273 |
|
|
Chris PeBenito |
296273 |
optional_policy(`
|
|
Chris PeBenito |
296273 |
secadm_role_change(auditadm_r)
|
|
Chris PeBenito |
e9c6cd |
')
|
|
Chris PeBenito |
e9c6cd |
|
|
Chris PeBenito |
e9c6cd |
optional_policy(`
|
|
Chris PeBenito |
296273 |
su_role_template(auditadm, auditadm_r, auditadm_t)
|
|
Chris PeBenito |
e9c6cd |
')
|
|
Chris PeBenito |
e9c6cd |
|
|
Chris PeBenito |
296273 |
optional_policy(`
|
|
Chris PeBenito |
296273 |
sudo_role_template(auditadm, auditadm_r, auditadm_t)
|
|
Chris PeBenito |
296273 |
')
|
|
Chris PeBenito |
296273 |
|
|
Chris PeBenito |
296273 |
optional_policy(`
|
|
Chris PeBenito |
296273 |
sysadm_role_change(auditadm_r)
|
|
Chris PeBenito |
296273 |
')
|
|
Chris PeBenito |
296273 |
|