rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Create type and allow squid to manage its own tmpfs files

Browse Source
This commit is contained in:
Jeremy Solt 2010-05-21 12:19:32 -04:00 committed by Chris PeBenito
parent d86c09846b
commit 599e8ff702
1 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
policy/modules/services/squid.te
View File

@ -38,6 +38,9 @@ init_script_file(squid_initrc_exec_t)
type squid_log_t;
logging_log_file(squid_log_t)
type squid_tmpfs_t;
files_tmpfs_file(squid_tmpfs_t)
type squid_var_run_t;
files_pid_file(squid_var_run_t)
@ -79,6 +82,10 @@ manage_files_pattern(squid_t, squid_log_t, squid_log_t)
manage_lnk_files_pattern(squid_t, squid_log_t, squid_log_t)
logging_log_filetrans(squid_t, squid_log_t, { file dir })
#squid requires the following when run in diskd mode, the recommended setting
manage_files_pattern(squid_t, squid_tmpfs_t, squid_tmpfs_t)
fs_tmpfs_filetrans(squid_t, squid_tmpfs_t, { file })
manage_files_pattern(squid_t, squid_var_run_t, squid_var_run_t)
files_pid_filetrans(squid_t, squid_var_run_t, file)
@ -127,8 +134,6 @@ dev_read_urand(squid_t)
fs_getattr_all_fs(squid_t)
fs_search_auto_mountpoints(squid_t)
#squid requires the following when run in diskd mode, the recommended setting
fs_rw_tmpfs_files(squid_t)
fs_list_inotifyfs(squid_t)
selinux_dontaudit_getattr_dir(squid_t)