SELinux Squid log to dir Modul

Loggen in ein anderes Verzeichnis

• cat /etc/squid/squid.conf

cache_log /misc/log/squid.log

Enforce abschalten

• setenforce 0

Squid restarte

• systemctl restart squid

Modul generieren

• grep squid /var/log/audit/audit.log | audit2allow -M squid-log

Modul installieren

• semodule -i squid-log.pp

Ergebnis zum nachlesen

• cat squid-log.te

module squid-log 1.0;

require {
	type squid_t;
	type mnt_t;
	class dir { add_name write };
	class file { append create getattr open read };
}

#============= squid_t ==============
allow squid_t mnt_t:dir { add_name write };
allow squid_t mnt_t:file { append create getattr open read };

Modul installieren

• semodule -r squid-log