Logrotate, ssh_agent - read selinux_config_t

[Ivan Gyurdiev <ivg2@xxxxxxxxxxx>]

logrotate and ssh_agent try to read /etc/selinux/config and fail.
I thought it would be reasonable to allow that, but I see this:

apache_macros.te:dontaudit httpd_$1_script_t selinux_config_t:dir
search;
crontab_macros.te:dontaudit $1_crontab_t selinux_config_t:dir search;
inetd_macros.te:dontaudit $1_t selinux_config_t:dir search;
ssh_agent_macros.te:dontaudit $1_ssh_agent_t selinux_config_t:dir
search;
ssh_macros.te:dontaudit $1_ssh_keysign_t selinux_config_t:dir search;
xserver_macros.te:dontaudit $1_xserver_t selinux_config_t:dir search;

Why?

-- 
Ivan Gyurdiev <ivg2@xxxxxxxxxxx>
Cornell University


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.