Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Update fedmsg selinux module to allow new logging stuff.

Browse source
This commit is contained in:
Ralph Bean 2014-03-03 16:49:34 +00:00
parent 72f327b1dd
commit dc9e28cd43
3 changed files with 11 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

BIN
roles/fedmsg_base/files/selinux/fedmsg.mod
View file

Binary file not shown.

BIN
roles/fedmsg_base/files/selinux/fedmsg.pp
View file

Binary file not shown.

12
roles/fedmsg_base/files/selinux/fedmsg.te
View file

@ -1,5 +1,5 @@
module fedmsg 1.0;
module fedmsg 1.1;
require {
type anon_inodefs_t;
@ -7,5 +7,15 @@ require {
class file write;
}
require {
type ptmx_t;
type httpd_t;
class chr_file getattr;
}
#============= httpd_t ==============
# For basic port binding
allow httpd_t anon_inodefs_t:file write;
# So that psutil can work from /etc/fedmsg.d/logging.py
allow httpd_t ptmx_t:chr_file getattr;