RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

add missing tunable

This commit is contained in:
Chris PeBenito 2005-10-31 19:58:51 +00:00
parent 6ff85b5c84
commit bea7b4548e
2 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
refpolicy/policy/global_tunables
View File

@ -71,6 +71,10 @@ gen_tunable(httpd_can_network_connect,false)
## Allow httpd cgi support
gen_tunable(httpd_enable_cgi,false)
## Allow httpd to act as a FTP server by
## listening on the ftp port.
gen_tunable(httpd_enable_ftp_server,false)
## Allow httpd to read home directories
gen_tunable(httpd_enable_homedirs,false)

4
refpolicy/policy/modules/services/apache.te
View File

@ -344,6 +344,10 @@ tunable_policy(`httpd_enable_cgi && httpd_unified && httpd_builtin_scripting',`
allow httpd_sys_script_t httpdcontent:file { rx_file_perms entrypoint };
')
tunable_policy(`httpd_enable_ftp_server',`
corenet_tcp_bind_ftp_port(httpd_t)
')
tunable_policy(`httpd_enable_homedirs && use_nfs_home_dirs',`
fs_read_nfs_files(httpd_t)
fs_read_nfs_symlinks(httpd_t)