mirror of
https://github.com/Telecominfraproject/openafc_final.git
synced 2025-11-02 02:57:58 +00:00
35 lines
976 B
Plaintext
35 lines
976 B
Plaintext
# Versioning for this module, not for RPM packages
|
|
policy_module(fbrat, 1.1)
|
|
|
|
require {
|
|
type fs_t;
|
|
type httpd_t;
|
|
type init_t;
|
|
type unconfined_t;
|
|
class file { read getattr open };
|
|
}
|
|
|
|
|
|
# HTTP Daemon itself runs under httpd_t domain, this is for management processes
|
|
type fbrat_t;
|
|
type fbrat_exec_t;
|
|
application_domain(fbrat_t, fbrat_exec_t)
|
|
|
|
# System configuration types
|
|
type fbrat_conf_t;
|
|
files_config_file(fbrat_conf_t)
|
|
|
|
# Daemon storage data types
|
|
type fbrat_data_t;
|
|
files_type(fbrat_data_t)
|
|
|
|
type_transition unconfined_t fbrat_exec_t : process fbrat_t;
|
|
type_transition httpd_t fbrat_exec_t : process fbrat_t;
|
|
|
|
manage_dirs_pattern(httpd_t, fbrat_data_t, fbrat_data_t)
|
|
manage_files_pattern(httpd_t, fbrat_data_t, fbrat_data_t)
|
|
# Run the child process in different domain
|
|
domain_auto_trans(httpd_t, fbrat_exec_t, fbrat_t)
|
|
manage_dirs_pattern(fbrat_t, fbrat_data_t, fbrat_data_t)
|
|
manage_files_pattern(fbrat_t, fbrat_data_t, fbrat_data_t)
|