IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

SELinux: Backport dirsrv_systemctl interface

Browse Source 
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
This commit is contained in:
Christian Heimes 2020-05-08 15:27:01 +02:00
parent 2e75623ef8
commit b56fa01528
1 changed files with 27 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
selinux/ipa.if
View File

@ -392,3 +392,30 @@ ifndef(`apache_manage_pid_files',`
manage_sock_files_pattern($1, httpd_var_run_t, httpd_var_run_t)
')
')
########################################
## <summary>
## Execute dirsrv server in the dirsrv domain.
## Backport from https://github.com/fedora-selinux/selinux-policy-contrib/pull/241
## </summary>
## <param name="domain">
## <summary>
## Domain allowed to transition.
## </summary>
## </param>
#
ifndef(`dirsrv_systemctl',`
interface(`dirsrv_systemctl',`
gen_require(`
type dirsrv_unit_file_t;
type dirsrv_t;
')
systemd_exec_systemctl($1)
init_reload_services($1)
allow $1 dirsrv_unit_file_t:file read_file_perms;
allow $1 dirsrv_unit_file_t:service manage_service_perms;
ps_process_pattern($1, dirsrv_t)
')
')