nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Added an allow that permitted apache to read httpd_sys_content_t stuff so that it would start

Browse Source
This commit is contained in:
Don Miner 2005-10-24 11:21:28 +00:00
parent 710791f1a4
commit 3d37bca18f
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
refpolicy/policy/modules/services/apache.te
View File

@ -177,6 +177,8 @@ allow httpd_t httpd_squirrelmail_t:dir create_dir_perms;
allow httpd_t httpd_squirrelmail_t:lnk_file create_lnk_perms;
allow httpd_t httpd_squirrelmail_t:file create_file_perms;
allow httpd_t httpd_sys_content_t:dir r_dir_perms;
allow httpd_t httpd_tmp_t:dir create_dir_perms;
allow httpd_t httpd_tmp_t:file create_file_perms;
files_create_tmp_files(httpd_t, httpd_tmp_t, { file dir })