SELinux Squid log to dir Modul

Loggen in ein anderes Verzeichnis

• cat /etc/squid/squid.conf

cache_log /misc/log/squid.log

Enforce abschalten

• setenforce 0
• systemctl restart squid
• grep squid /var/log/audit/audit.log | audit2allow -M squid-log
• semodule -i squid-log.pp
• cat squid-log.te

module squid-log 1.0;

require {
	type squid_t;
	type mnt_t;
	class dir { add_name write };
	class file { append create getattr open read };
}

#============= squid_t ==============
allow squid_t mnt_t:dir { add_name write };
allow squid_t mnt_t:file { append create getattr open read };