Add the System::Log label for /var/log

Create the System domain label System::Log.
This is the label for /var/log.
Log files with System and User labels will get written to /var/log.
The accesses are not transmutting.

Change-Id: Iaa3aa8d3883c7c6bf1734e3e9224eaf6f701e86a
Signed-off-by: Casey Schaufler <casey.schaufler@intel.com>

diff --git a/packaging/default-ac-domains.manifest b/packaging/default-ac-domains.manifest
index 346c08b1a4cffcc57452610a39aa2e9fbcd04eae..772f858c49bd17ea0559c3a305a85c92d4d65c2f 100644 (file)
--- a/packaging/default-ac-domains.manifest
+++ b/packaging/default-ac-domains.manifest
@@ -4,10 +4,12 @@
     <provide>
       <label name="System::Shared"/>
       <label name="System::Run"/>
+      <label name="System::Log"/>
     </provide>
     <request>
       <smack request="System::Shared" type="rwxat"/>
       <smack request="System::Run" type="rwxat"/>
+      <smack request="System::Log" type="rwxa"/>
       <smack request="_" type="l"/>
     </request>
     <permit>
@@ -20,6 +22,7 @@
     <request>
       <smack request="System" type="rwxa"/>
       <smack request="System::Run" type="rwxat"/>
+      <smack request="System::Log" type="rwxa"/>
     </request>
     <permit>
       <smack permit="System" type="rwxa"/>
@@ -31,6 +34,7 @@
       <smack request="System" type="wx"/>
       <smack request="System::Shared" type="rx"/>
       <smack request="System::Run" type="rwxat"/>
+      <smack request="System::Log" type="rwxa"/>
       <smack request="_" type="l"/>
     </request>
     <permit>