commit a473e29de0a5a1e88e1ac564d91dabb5437ae4fd
author Stephen Smalley <sds@tycho.nsa.gov> Tue Jul 30 09:19:00 2013 -0400
committer Stephen Smalley <sds@tycho.nsa.gov> Tue Sep 10 11:10:02 2013 -0400
tree 119ce6a9209119e13898bfab74a8bb4f10f849d5
parent 79e084fcc9a44a79646114021539ca7398110cc3

write_klog also requires write permission to the directory.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

te_macros

diff --git a/te_macros b/te_macros
index 283c4a3..9313938 100644
--- a/te_macros
+++ b/te_macros
@@ -303,7 +303,7 @@
 define(`write_klog', `
 type_transition $1 device:chr_file klog_device "__kmsg__";
 allow $1 klog_device:chr_file { create open write unlink };
-allow $1 device:dir { add_name remove_name };
+allow $1 device:dir { write add_name remove_name };
 ')
 
 #####################################