se

module myapp 1.0;

require {
	type file_type;	
	type httpd_t;
	type unconfined_t;
	type fs_t;
	attribute httpd_content_type;
	type user_home_t;
	class filesystem { associate };
	class file { getattr open read relabelto relabelfrom };
}

#============= httpd_t ==============

type myapp_t;
typeattribute myapp_t httpd_content_type;

allow httpd_t myapp_t:file { getattr open read };
allow unconfined_t myapp_t:file { getattr relabelto relabelfrom };
allow myapp_t fs_t:filesystem associate;
Créé il y a 1 mois.