diff --git a/corosync.if b/corosync.if index 11e5dc4..25babd6 100644 --- a/corosync.if +++ b/corosync.if @@ -71,9 +71,11 @@ interface(`corosync_read_log',` interface(`corosync_stream_connect',` gen_require(` type corosync_t, corosync_var_run_t; + type corosync_var_lib_t; ') files_search_pids($1) + stream_connect_pattern($1, corosync_var_lib_t, corosync_var_lib_t, corosync_t) stream_connect_pattern($1, corosync_var_run_t, corosync_var_run_t, corosync_t) ') diff --git a/pacemaker.te b/pacemaker.te index 99ab306..35a450f 100644 --- a/pacemaker.te +++ b/pacemaker.te @@ -47,3 +47,8 @@ auth_use_nsswitch(pacemaker_t) logging_send_syslog_msg(pacemaker_t) miscfiles_read_localization(pacemaker_t) + +optional_policy(` + corosync_stream_connect(pacemaker_t) +') +