Differential D3908 Diff 10586 roles/paas-docker/nginx/files/selinux/nginx.te

Changeset View

Standalone View

	Show All 9 Lines
	#			#
	# <auto-generated>			# <auto-generated>
	# This file is managed by our rOPS SaltStack repository.			# This file is managed by our rOPS SaltStack repository.
	#			#
	# Changes to this file may cause incorrect behavior			# Changes to this file may cause incorrect behavior
	# and will be lost if the state is redeployed.			# and will be lost if the state is redeployed.
	# </auto-generated>			# </auto-generated>

	policy_module(nginx, 1.0)			policy_module(nginx, 1.1)

	require {			require {
	type httpd_t;			type httpd_t;
				type httpd_var_run_t;
	type container_file_t;			type container_file_t;
				type unconfined_service_t;
	}			}

	#============= httpd_t ==============			#============= httpd_t ==============
	virt_exec_sandbox_files(httpd_t)			virt_exec_sandbox_files(httpd_t)
	virt_read_sandbox_files(httpd_t)			virt_read_sandbox_files(httpd_t)

	allow httpd_t container_file_t:lnk_file read;			allow httpd_t container_file_t:lnk_file read;
	allow httpd_t container_file_t:file read;			allow httpd_t container_file_t:file read;

				# Allow to connect to UNIX sockets
				allow httpd_t httpd_var_run_t:sock_file write;
				allow httpd_t unconfined_service_t:unix_stream_socket connectto;