Added dac_override
This commit is contained in:
parent
977bb115b7
commit
9265dff6d1
1 changed files with 3 additions and 1 deletions
4
mlogc.te
4
mlogc.te
|
@ -1,5 +1,5 @@
|
||||||
|
|
||||||
policy_module(mlogc,1.0.41)
|
policy_module(mlogc,1.0.42)
|
||||||
|
|
||||||
########################################
|
########################################
|
||||||
#
|
#
|
||||||
|
@ -104,6 +104,8 @@ allow httpd_t mlogc_log_t:file { write create open };
|
||||||
|
|
||||||
#============= mlogc_t ==============
|
#============= mlogc_t ==============
|
||||||
|
|
||||||
|
allow mlogc_t self:capability dac_override;
|
||||||
|
|
||||||
allow mlogc_t http_port_t:tcp_socket name_connect;
|
allow mlogc_t http_port_t:tcp_socket name_connect;
|
||||||
allow mlogc_t self:tcp_socket { write read };
|
allow mlogc_t self:tcp_socket { write read };
|
||||||
allow mlogc_t self:tcp_socket { connect getopt getattr create setopt };
|
allow mlogc_t self:tcp_socket { connect getopt getattr create setopt };
|
||||||
|
|
Loading…
Reference in a new issue