srivasta@debian.org--etch/refpolicy--debian--0.0--patch-7
srivasta@debian.org--etch/refpolicy--debian--0.0--patch-17
Interface but not use in russell-20080929-2.diff
Use removed in 0.2.20100524-2
Redundant
* policy/modules/admin/logrotate.if: Added in interface to allow modules
to search the /var/lib/logrotate hierarchy
Since the call of this interface for cron was removed in 0.2.20100524-2, the
interface is now redundant.
Index: policy/modules/admin/logrotate.if
===================================================================
--- policy/modules/admin/logrotate.if.orig
+++ policy/modules/admin/logrotate.if
@@ -84,6 +84,24 @@
########################################
##
+## Search logrotate runtime directries
+##
+##
+##
+## Domain allowed access.
+##
+##
+#
+interface(`logrotate_search_varlib',`
+ gen_require(`
+ type logrotate_var_lib_t;
+ ')
+
+ allow $1 logrotate_var_lib_t:dir search;
+')
+
+########################################
+##
## Do not audit attempts to inherit logrotate file descriptors.
##
##