The ps_process_pattern includes permission to get attributes of target domain.
This commit is contained in:
parent
6bb4d401ee
commit
86f9f96664
@ -1322,7 +1322,7 @@ interface(`apache_admin',`
|
||||
type httpd_suexec_tmp_t, httpd_tmp_t;
|
||||
')
|
||||
|
||||
allow $1 httpd_t:process { getattr ptrace signal_perms };
|
||||
allow $1 httpd_t:process { ptrace signal_perms };
|
||||
ps_process_pattern($1, httpd_t)
|
||||
|
||||
init_labeled_script_domtrans($1, httpd_initrc_exec_t)
|
||||
|
Loading…
Reference in New Issue
Block a user