rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

add apache_manage_all_content, bug 1602

Browse Source
This commit is contained in:
Chris PeBenito 2006-05-10 20:24:40 +00:00
parent 88bc7af316
commit 013d746abc
1 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
refpolicy/policy/modules/services/apache.if
View File

@ -470,6 +470,26 @@ interface(`apache_dontaudit_rw_tcp_sockets',`
dontaudit $1 httpd_t:tcp_socket { read write };
')
########################################
## <summary>
## Create, read, write, and delete all web content.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`apache_manage_all_content',`
gen_require(`
attribute httpdcontent;
')
allow $1 httpdcontent:dir manage_dir_perms;
allow $1 httpdcontent:file manage_file_perms;
allow $1 httpdcontent:lnk_file create_lnk_perms;
')
########################################
## <summary>
## Allow the specified domain to read