From 076002627934ea3f9ec59de1dde25a840bd1a452 Mon Sep 17 00:00:00 2001
From: HuaxinLuGitee <1539327763@qq.com>
Date: Sun, 13 Dec 2020 14:48:26 +0800
Subject: [PATCH] add-avc-for-openEuler-1

---
 policy/modules/contrib/firewalld.te | 2 ++
 policy/modules/contrib/logrotate.te | 4 +++-
 policy/modules/system/init.te       | 1 +
 3 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/policy/modules/contrib/firewalld.te b/policy/modules/contrib/firewalld.te
index d23045d..d8c5f25 100644
--- a/policy/modules/contrib/firewalld.te
+++ b/policy/modules/contrib/firewalld.te
@@ -107,6 +107,8 @@ sysnet_relabelto_net_conf(firewalld_t)
 userdom_dontaudit_create_admin_dir(firewalld_t)
 userdom_dontaudit_manage_admin_dir(firewalld_t)
 
+files_rw_var_lib_dirs(firewalld_t)
+
 optional_policy(`
 	dbus_system_domain(firewalld_t, firewalld_exec_t)
 
diff --git a/policy/modules/contrib/logrotate.te b/policy/modules/contrib/logrotate.te
index 98019eb..559c079 100644
--- a/policy/modules/contrib/logrotate.te
+++ b/policy/modules/contrib/logrotate.te
@@ -145,6 +145,7 @@ files_manage_generic_spool(logrotate_t)
 files_manage_generic_spool_dirs(logrotate_t)
 files_getattr_generic_locks(logrotate_t)
 files_dontaudit_list_mnt(logrotate_t)
+files_list_var(logrotate_t)
 
 fs_search_auto_mountpoints(logrotate_t)
 fs_getattr_xattr_fs(logrotate_t)
@@ -239,9 +240,10 @@ optional_policy(`
 
 optional_policy(`
 	apache_read_config(logrotate_t)
-    apache_read_sys_content_rw_dirs(logrotate_t)
+	apache_read_sys_content_rw_dirs(logrotate_t)
 	apache_domtrans(logrotate_t)
 	apache_signull(logrotate_t)
+	apache_read_sys_content(logrotate_t)
 ')
 
 optional_policy(`
diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te
index d8ca280..0bc90bf 100644
--- a/policy/modules/system/init.te
+++ b/policy/modules/system/init.te
@@ -597,6 +597,7 @@ files_mounton_kernel_symbol_table(init_t)
 files_manage_all_pid_dirs(init_t)
 files_write_all_pid_sockets(init_t)
 files_manage_etc_dirs(init_t)
+files_rw_etc_files(init_t)
 files_manage_generic_tmp_dirs(init_t)
 files_relabel_all_pid_dirs(init_t)
 files_relabel_all_pid_files(init_t)
-- 
1.8.3.1