Răsfoiți Sursa

aloow acmeupdater to manager ejabberd and write to files in etc, needed for the ejabberd certificates

Helmut Pozimski 7 ani în urmă
părinte
comite
7ab04446b5
1 a modificat fișierele cu 4 adăugiri și 2 ștergeri
  1. 4 2
      policy/modules/acme-updater.te

+ 4 - 2
policy/modules/acme-updater.te

@@ -1,4 +1,4 @@
-policy_module(acme-updater, 0.1.11)
+policy_module(acme-updater, 0.1.12)
 
 #################################
 #
@@ -26,7 +26,7 @@ miscfiles_manage_generic_cert_files(acmeupdater_t)
 
 sysnet_dns_name_resolve(acmeupdater_t)
 
-files_read_etc_files(acmeupdater_t)
+files_manage_etc_files(acmeupdater_t)
 files_search_var_lib(acmeupdater_t)
 files_read_all_locks(acmeupdater_t)
 
@@ -44,6 +44,8 @@ read_lnk_files_pattern(acmeupdater_t, acmetool_var_lib_t, acmetool_var_lib_t)
 apache_manage_config(acmeupdater_t)
 apache_domtrans(acmeupdater_t)
 
+jabber_admin(acmeupdater_t)
+
 gen_require(`
 	type httpd_initrc_exec_t;
 ')