69779d5 Changes to the apache policy module and dependencies

Authored and Committed by Dominick Grift 11 years ago
    Changes to the apache policy module and dependencies
    
    httpd_t can run gpg in the gpg web domain conditionally for php pear
    Crypt_GPG (rhbz#562083)
    
    We would probably be better off with a domain prefix derived gpg_role()
    but this will do as we do not want httpd_t to be able to domain
    transition to gpg_t because that will give httpd_t a path to users keys
    
    Left out some rules that i am not confident about
    
    Do not allow system scripts to execute httpd temporary content
    conditionally
    
    Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
        
file modified
+23 -0
file modified
+2 -6
file modified
+19 -0
file modified
+26 -1