From d2b7c306571374f9aae2f6409f47f34301af490b Mon Sep 17 00:00:00 2001 From: Ralf Ertzinger Date: Sun, 17 Nov 2019 13:25:04 +0000 Subject: [PATCH] Add httpd-unix-sock --- httpd-unix-sock/httpd-unix-sock.fc | 0 httpd-unix-sock/httpd-unix-sock.if | 1 + httpd-unix-sock/httpd-unix-sock.te | 10 ++++++++++ 3 files changed, 11 insertions(+) create mode 100644 httpd-unix-sock/httpd-unix-sock.fc create mode 100644 httpd-unix-sock/httpd-unix-sock.if create mode 100644 httpd-unix-sock/httpd-unix-sock.te diff --git a/httpd-unix-sock/httpd-unix-sock.fc b/httpd-unix-sock/httpd-unix-sock.fc new file mode 100644 index 0000000..e69de29 diff --git a/httpd-unix-sock/httpd-unix-sock.if b/httpd-unix-sock/httpd-unix-sock.if new file mode 100644 index 0000000..3eb6a30 --- /dev/null +++ b/httpd-unix-sock/httpd-unix-sock.if @@ -0,0 +1 @@ +## diff --git a/httpd-unix-sock/httpd-unix-sock.te b/httpd-unix-sock/httpd-unix-sock.te new file mode 100644 index 0000000..ef11af9 --- /dev/null +++ b/httpd-unix-sock/httpd-unix-sock.te @@ -0,0 +1,10 @@ +policy_module(httpd-unix-sock, 0.0.1) + +require { + type httpd_t; + type unconfined_service_t; +} + +files_search_pids(httpd_t); +files_write_generic_pid_pipes(httpd_t); +allow httpd_t unconfined_service_t:unix_stream_socket { getattr connectto }; -- 1.8.3.1