srivasta@debian.org--etch/refpolicy--debian--0.0--patch-7 srivasta@debian.org--etch/refpolicy--debian--0.0--patch-17 Interface but not use in russell-20080929-2.diff Use removed in 0.2.20100524-2 Redundant * policy/modules/admin/logrotate.if: Added in interface to allow modules to search the /var/lib/logrotate hierarchy Since the call of this interface for cron was removed in 0.2.20100524-2, the interface is now redundant. Index: policy/modules/admin/logrotate.if =================================================================== --- policy/modules/admin/logrotate.if.orig +++ policy/modules/admin/logrotate.if @@ -84,6 +84,24 @@ ######################################## ## +## Search logrotate runtime directries +## +## +## +## Domain allowed access. +## +## +# +interface(`logrotate_search_varlib',` + gen_require(` + type logrotate_var_lib_t; + ') + + allow $1 logrotate_var_lib_t:dir search; +') + +######################################## +## ## Do not audit attempts to inherit logrotate file descriptors. ## ##