## SUID/SGID program monitoring ######################################## ## ## Allow the specified domain to read ## sxid log files. ## ## ## ## Domain allowed access. ## ## # interface(`sxid_read_log',` gen_require(` type sxid_log_t; ') logging_search_logs($1) allow $1 sxid_log_t:file r_file_perms; ')