ansible-roles/roles/taiga/files/taiga.te

23 lines
650 B
Plaintext

module taiga 1.2;
require {
type ldconfig_exec_t;
type etc_t;
type init_t;
type init_tmp_t;
type ldconfig_t;
type amqp_port_t;
type postgresql_port_t;
type usr_t;
class file { append execute_no_trans write map };
class tcp_socket name_connect;
class process2 nnp_transition;
}
allow init_t ldconfig_exec_t:file execute_no_trans;
allow init_t ldconfig_t:process2 nnp_transition;
allow init_t usr_t:file { write append };
allow init_t init_tmp_t:file map;
allow init_t postgresql_port_t:tcp_socket name_connect;
allow init_t amqp_port_t:tcp_socket name_connect;