nginx.te
No OneTemporary
Actions

Size

1 KB

Referenced Files

None

Subscribers

None

nginx.te
View Options

	# -------------------------------------------------------------
	# Configuration for Let's encrypt nginx
	# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
	# Project: Nasqueron
	# Description: SELinux policy for nginx
	# Allow to serve containers generated files
	# Source file: roles/paas-docker/nginx/files/selinux/nginx.te
	# -------------------------------------------------------------
	#
	# <auto-generated>
	# This file is managed by our rOPS SaltStack repository.
	#
	# Changes to this file may cause incorrect behavior
	# and will be lost if the state is redeployed.
	# </auto-generated>

	policy_module(nginx, 1.1)

	require {
	type httpd_t;
	type httpd_var_run_t;
	type container_file_t;
	type unconfined_service_t;
	}

	#============= httpd_t ==============
	virt_exec_sandbox_files(httpd_t)
	virt_read_sandbox_files(httpd_t)

	allow httpd_t container_file_t:lnk_file read;
	allow httpd_t container_file_t:file read;

	# Allow to connect to UNIX sockets
	allow httpd_t httpd_var_run_t:sock_file write;
	allow httpd_t unconfined_service_t:unix_stream_socket connectto;