module omsagent-logrotate 1.0;
require {
type user_tmp_t;
type var_log_t;
type logrotate_t;
class file { getattr write };
}
#============= logrotate_t ==============
allow logrotate_t user_tmp_t:file write;
allow logrotate_t var_log_t:file getattr;