gentoo-selinux-policies/logrotate_additional.te

policy_module(logrotate_additional, 0.0.1)

require {
  type logrotate_t;
  type syslogd_t;
  type initrc_state_t;
}

init_read_script_status_files(logrotate_t)
allow logrotate_t initrc_state_t:lnk_file { getattr read };
allow logrotate_t initrc_state_t:dir read;

allow logrotate_t syslogd_t:process signull;