alecksey/globus-selinux-policy
2
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Изменить 'globus.te'

Browse Source
This commit is contained in:
Alexey Logvinov 2020-06-28 20:16:50 +03:00
parent 929101387f
commit 72edae112a
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
globus.te
View File

@ -7,6 +7,10 @@ require {
type tmp_t; type tmp_t;
type init_t; type init_t;
type httpd_t; type httpd_t;
type httpd_config_t;
type smtp_port_t;
type http_port_t;
type public_content_rw_t;
class tcp_socket name_connect; class tcp_socket name_connect;
class dir { create rename reparent rmdir }; class dir { create rename reparent rmdir };
class file { append create execute execute_no_trans lock open read setattr unlink write }; class file { append create execute execute_no_trans lock open read setattr unlink write };
@ -14,7 +18,7 @@ require {
#============= httpd_t ============= #============= httpd_t =============
allow httpd_t http_port_t:tcp_socket name_connect; allow httpd_t http_port_t:tcp_socket name_connect;
allow httpd_t httpd_config_t:dir add_name; #allow httpd_t httpd_config_t:dir add_name;
allow httpd_t httpd_config_t:file {append create}; allow httpd_t httpd_config_t:file {append create};
allow httpd_t smtp_port_t:tcp_socket name_connect; allow httpd_t smtp_port_t:tcp_socket name_connect;