|
Dominick Grift |
927a890 |
policy_module(mojomojo, 1.0.1)
|
|
|
1ec3d1a |
|
|
|
1ec3d1a |
########################################
|
|
|
1ec3d1a |
#
|
|
|
1ec3d1a |
# Declarations
|
|
|
1ec3d1a |
#
|
|
|
1ec3d1a |
|
|
|
1ec3d1a |
type httpd_mojomojo_tmp_t;
|
|
|
1ec3d1a |
files_tmp_file(httpd_mojomojo_tmp_t)
|
|
|
1ec3d1a |
|
|
|
1ec3d1a |
########################################
|
|
|
1ec3d1a |
#
|
|
Dominick Grift |
927a890 |
# Local policy
|
|
|
1ec3d1a |
#
|
|
|
1ec3d1a |
|
|
|
835c61e |
optional_policy(`
|
|
|
835c61e |
apache_content_template(mojomojo)
|
|
|
bde701d |
|
|
|
835c61e |
allow httpd_mojomojo_script_t httpd_t:unix_stream_socket rw_stream_socket_perms;
|
|
|
1ec3d1a |
|
|
|
835c61e |
manage_dirs_pattern(httpd_mojomojo_script_t, httpd_mojomojo_tmp_t, httpd_mojomojo_tmp_t)
|
|
|
835c61e |
manage_files_pattern(httpd_mojomojo_script_t, httpd_mojomojo_tmp_t, httpd_mojomojo_tmp_t)
|
|
|
835c61e |
files_tmp_filetrans(httpd_mojomojo_script_t, httpd_mojomojo_tmp_t, { file dir })
|
|
|
1ec3d1a |
|
|
|
835c61e |
corenet_tcp_connect_postgresql_port(httpd_mojomojo_script_t)
|
|
|
835c61e |
corenet_tcp_connect_mysqld_port(httpd_mojomojo_script_t)
|
|
|
835c61e |
corenet_tcp_connect_smtp_port(httpd_mojomojo_script_t)
|
|
|
835c61e |
corenet_sendrecv_postgresql_client_packets(httpd_mojomojo_script_t)
|
|
|
835c61e |
corenet_sendrecv_mysqld_client_packets(httpd_mojomojo_script_t)
|
|
|
835c61e |
corenet_sendrecv_smtp_client_packets(httpd_mojomojo_script_t)
|
|
|
1ec3d1a |
|
|
|
835c61e |
files_search_var_lib(httpd_mojomojo_script_t)
|
|
|
1ec3d1a |
|
|
|
835c61e |
sysnet_dns_name_resolve(httpd_mojomojo_script_t)
|
|
|
1ec3d1a |
|
|
|
835c61e |
mta_send_mail(httpd_mojomojo_script_t)
|
|
|
1ec3d1a |
|
|
|
835c61e |
optional_policy(`
|
|
|
835c61e |
mysql_stream_connect(httpd_mojomojo_script_t)
|
|
|
835c61e |
')
|
|
|
835c61e |
|
|
|
835c61e |
optional_policy(`
|
|
|
835c61e |
postgresql_stream_connect(httpd_mojomojo_script_t)
|
|
|
835c61e |
')
|
|
|
1ec3d1a |
')
|