## policy for mcelog
########################################
##
## Execute a domain transition to run mcelog.
##
##
##
## Domain allowed to transition.
##
##
#
interface(`mcelog_domtrans',`
gen_require(`
type mcelog_t, mcelog_exec_t;
')
domtrans_pattern($1, mcelog_exec_t, mcelog_t)
')
####################################
##
## Read mcelog logs.
##
##
##
## Domain allowed access.
##
##
#
interface(`mcelog_read_log',`
gen_require(`
type mcelog_log_t;
')
logging_search_logs($1)
read_files_pattern($1, mcelog_log_t, mcelog_log_t)
')