module scxagent-logrotate 1.0;

require {  
        type var_log_t;  
        type logrotate_t;  
        class file getattr;  
        class dir write;  
}  

#============= logrotate_t ==============  
 
allow logrotate_t var_log_t:dir write;  
allow logrotate_t var_log_t:file getattr;