Browse Source

phpfpm-additional: add policy module

Helmut Pozimski 4 years ago
parent
commit
ad0a301a77
1 changed files with 13 additions and 0 deletions
  1. 13 0
      phpfpm_additional.te

+ 13 - 0
phpfpm_additional.te

@@ -0,0 +1,13 @@
+policy_module(phpfpm_additional, 0.0.1)
+
+require {
+  type phpfpm_t;
+}
+
+allow phpfpm_t self:process sigkill;
+
+miscfiles_read_all_certs(phpfpm_t)
+corenet_tcp_connect_http_port(phpfpm_t)
+apache_manage_sys_content(phpfpm_t)
+fs_mmap_rw_hugetlbfs_files(phpfpm_t)
+