Browse Source

jabber_additional: add missing file contexts

Helmut Pozimski 3 years ago
parent
commit
dcaa3a1a1f
2 changed files with 17 additions and 1 deletions
  1. 2 0
      jabber_additional.fc
  2. 15 1
      jabber_additional.te

+ 2 - 0
jabber_additional.fc

@@ -0,0 +1,2 @@
+/var/spool/jabber(/.*)?	gen_context(system_u:object_r:jabberd_var_lib_t,s0)
+/var/cache/ejabberd(/.*)?	gen_context(system_u:object_r:jabberd_var_cache_t,s0)

+ 15 - 1
jabber_additional.te

@@ -1,4 +1,18 @@
-policy_module(jabber_additional, 0.0.1)
+policy_module(jabber_additional, 0.0.2)
+
+require {
+  type jabberd_t;
+  type jabberd_var_lib_t;
+}
 
 type jabber_unit_t;
 init_unit_file(jabber_unit_t)
+
+type jabberd_var_cache_t;
+files_type(jabberd_var_cache_t)
+
+manage_dirs_pattern(jabberd_t, jabberd_var_cache_t, jabberd_var_cache_t)
+manage_files_pattern(jabberd_t, jabberd_var_cache_t, jabberd_var_cache_t)
+type_transition jabberd_t jabberd_var_cache_t:{ file dir } jabberd_var_cache_t;
+
+kernel_read_vm_overcommit_sysctl(jabberd_t)