From 6a800840bda95fca3ee5e723ae4c7ea0de9cf95f Mon Sep 17 00:00:00 2001
From: Zdenek Pytela <zpytela@redhat.com>
Date: Wed, 18 Jan 2023 17:49:03 +0100
Subject: [PATCH] Allow icecast rename its log files

This permission is required when icecast is configured with
"logarchive 1" and the log file size reaches the "logsize" limit.

Resolves: rhbz#2156763
---
 policy/modules/contrib/icecast.te | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/contrib/icecast.te b/policy/modules/contrib/icecast.te
index 23f8b5d4c7..33267a72fe 100644
--- a/policy/modules/contrib/icecast.te
+++ b/policy/modules/contrib/icecast.te
@@ -41,6 +41,7 @@ allow icecast_t self:tcp_socket { accept listen };
 allow icecast_t icecast_log_t:dir setattr_dir_perms;
 append_files_pattern(icecast_t, icecast_log_t, icecast_log_t)
 create_files_pattern(icecast_t, icecast_log_t, icecast_log_t)
+rename_files_pattern(icecast_t, icecast_log_t, icecast_log_t)
 setattr_files_pattern(icecast_t, icecast_log_t, icecast_log_t)
 
 manage_dirs_pattern(icecast_t, icecast_var_run_t, icecast_var_run_t)
