policy_module(syslog_ng, 1.0.5)

require {
        type syslogd_t, shell_exec_t, bin_t;
        class file { ioctl read getattr lock execute execute_no_trans open };
        class lnk_file { read getattr };
        class process { fork sigchld sigkill sigstop signull signal getsched setsched setpgid getcap setcap setrlimit };
}

allow syslogd_t shell_exec_t:file { read execute getattr execute_no_trans open };
allow syslogd_t bin_t:file { ioctl read getattr lock execute execute_no_trans open };
allow syslogd_t bin_t:lnk_file { read getattr };

allow syslogd_t syslogd_t : process { fork sigchld sigkill sigstop signull signal getsched setsched setpgid getcap setcap setrlimit } ;

