From 2f5981f2244289a1cc79748e9ffdaaea168b1df2 Mon Sep 17 00:00:00 2001 From: Xin Ouyang Date: Fri, 23 Aug 2013 16:36:09 +0800 Subject: [PATCH] fix dmesg to use /dev/kmsg as default input Signed-off-by: Xin Ouyang --- policy/modules/admin/dmesg.if | 1 + policy/modules/admin/dmesg.te | 2 ++ 2 files changed, 3 insertions(+) diff --git a/policy/modules/admin/dmesg.if b/policy/modules/admin/dmesg.if index e1973c7..739a4bc 100644 --- a/policy/modules/admin/dmesg.if +++ b/policy/modules/admin/dmesg.if @@ -37,4 +37,5 @@ interface(`dmesg_exec',` corecmd_search_bin($1) can_exec($1, dmesg_exec_t) + dev_read_kmsg($1) ') diff --git a/policy/modules/admin/dmesg.te b/policy/modules/admin/dmesg.te index 72bc6d8..c591aea 100644 --- a/policy/modules/admin/dmesg.te +++ b/policy/modules/admin/dmesg.te @@ -28,6 +28,8 @@ kernel_read_proc_symlinks(dmesg_t) dev_read_sysfs(dmesg_t) +dev_read_kmsg(dmesg_t) + fs_search_auto_mountpoints(dmesg_t) term_dontaudit_use_console(dmesg_t) -- 1.7.9.5