Home Explore Help
Sign In
Hoshpak
/
gentoo-selinux-policies
1
0
Fork 0
Files Issues 0 Pull Requests 0 Wiki
Tree: 4113ae0cab
Branches Tags
gentoo-selinux-...
/
phpfpm_additional.te

phpfpm_additional.te 1.1 KB
History Raw

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647 
  1. policy_module(phpfpm_additional, 0.0.7)
    2. 

  2. 

  3. require {
    4. 

  4.   type phpfpm_t;
    5. 

  5.   type etc_t;
    6. 

  6.   type httpd_sys_content_t;
    7. 

  7.   type phpfpm_tmp_t;
    8. 

  8.   type usr_t;
    9. 

  9.   type httpd_sys_ra_content_t;
    10. 

  10. }
    11. 

  11. 

  12. type phpfpm_initrc_exec_t;
    13. 

  13. init_script_file(phpfpm_initrc_exec_t)
    14. 

  14. 

  15. type phpfpm_unit_t;
    16. 

  16. init_unit_file(phpfpm_unit_t)
    17. 

  17. 

  18. allow phpfpm_t self:process sigkill;
    19. 

  19. 

  20. allow phpfpm_t phpfpm_tmp_t:lnk_file { create unlink };
    21. 

  21. 

  22. miscfiles_read_all_certs(phpfpm_t)
    23. 

  23. miscfiles_read_fonts(phpfpm_t)
    24. 

  24. 

  25. corecmd_exec_shell(phpfpm_t)
    26. 

  26. 

  27. corenet_tcp_connect_pop_port(phpfpm_t)
    28. 

  28. corenet_tcp_connect_http_port(phpfpm_t)
    29. 

  29. corenet_tcp_connect_sieve_port(phpfpm_t)
    30. 

  30. corenet_tcp_connect_smtp_port(phpfpm_t)
    31. 

  31. 

  32. files_tmp_filetrans(phpfpm_t, phpfpm_tmp_t, lnk_file)
    33. 

  33. 

  34. apache_manage_sys_content(phpfpm_t)
    35. 

  35. manage_dirs_pattern(phpfpm_t, httpd_sys_ra_content_t, httpd_sys_ra_content_t)
    36. 

  36. fs_mmap_rw_hugetlbfs_files(phpfpm_t)
    37. 

  37. 

  38. allow phpfpm_t etc_t:file map;
    39. 

  39. allow phpfpm_t httpd_sys_content_t:file map;
    40. 

  40. allow phpfpm_t phpfpm_tmp_t:file map;
    41. 

  41. allow phpfpm_t usr_t:file map;
    42. 

  42. 

  43. mta_sendmail_exec(phpfpm_t)
    44. 

  44. mta_send_mail(phpfpm_t)
    45. 

  45. mta_signal_system_mail(phpfpm_t)
    46. 

  46. 

  47. logging_send_syslog_msg(phpfpm_t)
    48.