From: Miroslav Grepl Date: Mon, 28 Nov 2011 10:57:36 +0000 (+0100) Subject: Allow httpd_collectd_script_t to search /var/lib X-Git-Tag: 000~78^2~2 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=376c22fef932487bd97673b66368ff347914b702;p=people%2Fstevee%2Fselinux-policy.git Allow httpd_collectd_script_t to search /var/lib --- diff --git a/policy/modules/services/collectd.te b/policy/modules/services/collectd.te index e4d7098e..ca71d08f 100644 --- a/policy/modules/services/collectd.te +++ b/policy/modules/services/collectd.te @@ -71,7 +71,8 @@ tunable_policy(`collectd_can_network_connect',` optional_policy(` apache_content_template(collectd) - + + files_search_var_lib(httpd_collectd_script_t) read_files_pattern(httpd_collectd_script_t, collectd_var_lib_t, collectd_var_lib_t) list_dirs_pattern(httpd_collectd_script_t, collectd_var_lib_t, collectd_var_lib_t) miscfiles_setattr_fonts_cache_dirs(httpd_collectd_script_t)