Browse Source

atop: don't audit dac_read_search

Helmut Pozimski 3 years ago
parent
commit
1e39560543
1 changed files with 3 additions and 1 deletions
  1. 3 1
      atop.te

+ 3 - 1
atop.te

@@ -1,4 +1,4 @@
-policy_module(atop, 0.1.24)
+policy_module(atop, 0.1.25)
 
 ########################################
 #
@@ -107,6 +107,8 @@ cron_system_entry(atop_t, atop_exec_t)
 
 init_read_utmp(atop_t)
 
+dontaudit atop_t self:capability dac_read_search;
+
 ### atopacct policy
 
 allow atopacct_t self:capability { net_admin sys_nice sys_pacct };