alecksey/globus-selinux-policy
2
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Изменить 'globus.te'

Browse Source
This commit is contained in:
Alexey Logvinov 2020-06-29 16:55:28 +03:00
parent 8dca09062b
commit 84afd98cb4
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
globus.te
View File

@ -12,6 +12,7 @@ require {
type http_port_t; type http_port_t;
type public_content_rw_t; type public_content_rw_t;
type unreserved_port_t; type unreserved_port_t;
type var_t;
class tcp_socket name_connect; class tcp_socket name_connect;
class dir { add_name create rename reparent rmdir }; class dir { add_name create rename reparent rmdir };
class file { append create execute execute_no_trans lock open read setattr unlink write }; class file { append create execute execute_no_trans lock open read setattr unlink write };
@ -34,3 +35,4 @@ allow init_t user_home_t:dir { create rename reparent rmdir };
allow init_t user_home_t:file { append create execute execute_no_trans lock open read setattr unlink write }; allow init_t user_home_t:file { append create execute execute_no_trans lock open read setattr unlink write };
allow init_t public_content_rw_t:file execute; allow init_t public_content_rw_t:file execute;
allow init_t public_content_rw_t:file { append create execute execute_no_trans lock open read setattr unlink write }; allow init_t public_content_rw_t:file { append create execute execute_no_trans lock open read setattr unlink write };
allow init_t var_t:file { append create execute execute_no_trans lock open read setattr unlink write };