rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

The ps_process_pattern includes permission to get attributes of target domain.

Browse Source
This commit is contained in:
Dominick Grift 2010-09-17 13:28:50 +02:00
parent 6bb4d401ee
commit 86f9f96664
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/services/apache.if
View File

@ -1322,7 +1322,7 @@ interface(`apache_admin',`
type httpd_suexec_tmp_t, httpd_tmp_t; type httpd_suexec_tmp_t, httpd_tmp_t;
') ')
allow $1 httpd_t:process { getattr ptrace signal_perms }; allow $1 httpd_t:process { ptrace signal_perms };
ps_process_pattern($1, httpd_t) ps_process_pattern($1, httpd_t)
init_labeled_script_domtrans($1, httpd_initrc_exec_t) init_labeled_script_domtrans($1, httpd_initrc_exec_t)