From Debian package 0.2.20100524-9 * Allow webalizer to read usr_t files for geoip database. Also make webalizer_usage_t and webalizer_write_t aliases for webalizer_var_lib_t. Index: policy/modules/apps/webalizer.te =================================================================== --- policy/modules/apps/webalizer.te.orig +++ policy/modules/apps/webalizer.te @@ -13,17 +13,13 @@ type webalizer_etc_t; files_config_file(webalizer_etc_t) -type webalizer_usage_t; -files_type(webalizer_usage_t) - type webalizer_tmp_t; files_tmp_file(webalizer_tmp_t) type webalizer_var_lib_t; files_type(webalizer_var_lib_t) -type webalizer_write_t; -files_type(webalizer_write_t) +typealias webalizer_var_lib_t alias { webalizer_write_t webalizer_usage_t }; ######################################## # @@ -71,6 +67,7 @@ files_read_etc_files(webalizer_t) files_read_etc_runtime_files(webalizer_t) +files_read_usr_files(webalizer_t) logging_list_logs(webalizer_t) logging_send_syslog_msg(webalizer_t)