X-Git-Url: https://git.camperquake.de/gitweb.cgi?p=selinux.git;a=blobdiff_plain;f=httpd-unix-sock%2Fhttpd-unix-sock.te;fp=httpd-unix-sock%2Fhttpd-unix-sock.te;h=ef11af9e34890f4dc58671d4a11011e958d929e2;hp=0000000000000000000000000000000000000000;hb=d2b7c306571374f9aae2f6409f47f34301af490b;hpb=2577bee7f5f259449d730493d2c21cd86d3fe2c0 diff --git a/httpd-unix-sock/httpd-unix-sock.te b/httpd-unix-sock/httpd-unix-sock.te new file mode 100644 index 0000000..ef11af9 --- /dev/null +++ b/httpd-unix-sock/httpd-unix-sock.te @@ -0,0 +1,10 @@ +policy_module(httpd-unix-sock, 0.0.1) + +require { + type httpd_t; + type unconfined_service_t; +} + +files_search_pids(httpd_t); +files_write_generic_pid_pipes(httpd_t); +allow httpd_t unconfined_service_t:unix_stream_socket { getattr connectto };