IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

SELinux: apache_manage_pid_files for F30

Browse Source 
SELinux policy on F30 doesn't have the interface
apache_manage_pid_files(). Define the interface conditionally.

Fixes: https://pagure.io/freeipa/issue/8241
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
This commit is contained in:
Christian Heimes 2020-03-24 16:07:54 +01:00 committed by Alexander Bokovoy
parent c1c45df4b2
commit e913fdc8aa
1 changed files with 27 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
selinux/ipa.if
View File

@ -365,3 +365,30 @@ interface(`ipa_custodia_stream_connect',`
allow $1 ipa_custodia_t:unix_stream_socket { connectto };
')
########################################
## <summary>
## Manage apache pid objects.
## The interface is defined by selinux-policy since Fedora 31 and is
## conditionally defined here for Fedora 30.
## See https://pagure.io/freeipa/issue/8241.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
ifndef(`apache_manage_pid_files',`
interface(`apache_manage_pid_files',`
gen_require(`
type httpd_var_run_t;
')
files_search_pids($1)
manage_dirs_pattern($1, httpd_var_run_t, httpd_var_run_t)
manage_files_pattern($1, httpd_var_run_t, httpd_var_run_t)
manage_sock_files_pattern($1, httpd_var_run_t, httpd_var_run_t)
')
')