2010-08-26 16:55:57 +00:00
|
|
|
policy_module(mojomojo, 1.0.0)
|
2010-08-02 13:28:06 +00:00
|
|
|
|
|
|
|
|
########################################
|
|
|
|
|
#
|
|
|
|
|
# Declarations
|
|
|
|
|
#
|
|
|
|
|
|
|
|
|
|
apache_content_template(mojomojo)
|
|
|
|
|
|
2010-08-26 13:41:21 +00:00
|
|
|
type httpd_mojomojo_tmp_t;
|
|
|
|
|
files_tmp_file(httpd_mojomojo_tmp_t)
|
|
|
|
|
|
2010-08-02 13:28:06 +00:00
|
|
|
########################################
|
|
|
|
|
#
|
|
|
|
|
# mojomojo local policy
|
|
|
|
|
#
|
|
|
|
|
|
|
|
|
|
allow httpd_mojomojo_script_t httpd_t:unix_stream_socket rw_stream_socket_perms;
|
|
|
|
|
|
2010-08-26 13:41:21 +00:00
|
|
|
manage_dirs_pattern(httpd_mojomojo_script_t, httpd_mojomojo_tmp_t, httpd_mojomojo_tmp_t)
|
|
|
|
|
manage_files_pattern(httpd_mojomojo_script_t, httpd_mojomojo_tmp_t, httpd_mojomojo_tmp_t)
|
|
|
|
|
files_tmp_filetrans(httpd_mojomojo_script_t, httpd_mojomojo_tmp_t, { file dir })
|
|
|
|
|
|
2010-08-02 13:28:06 +00:00
|
|
|
corenet_tcp_connect_postgresql_port(httpd_mojomojo_script_t)
|
2010-08-26 13:41:21 +00:00
|
|
|
corenet_tcp_connect_mysqld_port(httpd_mojomojo_script_t)
|
|
|
|
|
corenet_tcp_connect_smtp_port(httpd_mojomojo_script_t)
|
2010-08-26 16:55:57 +00:00
|
|
|
corenet_sendrecv_postgresql_client_packets(httpd_mojomojo_script_t)
|
|
|
|
|
corenet_sendrecv_mysqld_client_packets(httpd_mojomojo_script_t)
|
2010-08-02 13:28:06 +00:00
|
|
|
corenet_sendrecv_smtp_client_packets(httpd_mojomojo_script_t)
|
|
|
|
|
|
|
|
|
|
files_search_var_lib(httpd_mojomojo_script_t)
|
|
|
|
|
|
2010-08-26 13:41:21 +00:00
|
|
|
sysnet_dns_name_resolve(httpd_mojomojo_script_t)
|
|
|
|
|
|
2010-08-26 16:55:57 +00:00
|
|
|
mta_send_mail(httpd_mojomojo_script_t)
|
|
|
|
|
|
2010-08-02 13:28:06 +00:00
|
|
|
optional_policy(`
|
|
|
|
|
mysql_stream_connect(httpd_mojomojo_script_t)
|
|
|
|
|
')
|
|
|
|
|
|
|
|
|
|
optional_policy(`
|
|
|
|
|
postgresql_stream_connect(httpd_mojomojo_script_t)
|
|
|
|
|
')
|
