nginx.te
No OneTemporary
Actions

Size

975 B

Referenced Files

None

Subscribers

None

nginx.te
View Options

	# -------------------------------------------------------------
	# Configuration for Let's encrypt nginx
	# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
	# Project: Nasqueron
	# Created: 2018-10-27
	# Description: SELinux policy for nginx
	# Allow to serve containers generated files
	# Source file: roles/paas-docker/nginx/files/selinux/nginx.te
	# -------------------------------------------------------------
	#
	# <auto-generated>
	# This file is managed by our rOPS SaltStack repository.
	#
	# Changes to this file may cause incorrect behavior
	# and will be lost if the state is redeployed.
	# </auto-generated>

	policy_module(nginx, 1.0)

	require {
	type httpd_t;
	type container_file_t;
	}

	#============= httpd_t ==============
	virt_exec_sandbox_files(httpd_t)
	virt_read_sandbox_files(httpd_t)

	allow httpd_t container_file_t:lnk_file read;
	allow httpd_t container_file_t:file read;