diff options
| author | Alan Conway <aconway@apache.org> | 2010-07-15 19:42:23 +0000 |
|---|---|---|
| committer | Alan Conway <aconway@apache.org> | 2010-07-15 19:42:23 +0000 |
| commit | e0f9d4157f823135515dbaa7b7eeb20db833f9ad (patch) | |
| tree | 77b431c4633cc4e0303b9eefab25f6b0cd8e6b84 /cpp | |
| parent | af96ba665ab68c99b7998b303a05cc9a6e7890e7 (diff) | |
| download | qpid-python-e0f9d4157f823135515dbaa7b7eeb20db833f9ad.tar.gz | |
Selinux policy module needed to run a qpid cluster with selinux in enforcing mode.
git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@964551 13f79535-47bb-0310-9956-ffa450edef68
Diffstat (limited to 'cpp')
| -rw-r--r-- | cpp/etc/selinux/qpidd.te | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/cpp/etc/selinux/qpidd.te b/cpp/etc/selinux/qpidd.te new file mode 100644 index 0000000000..9163c55acf --- /dev/null +++ b/cpp/etc/selinux/qpidd.te @@ -0,0 +1,16 @@ +# selinux policy module needed to run a qpid cluster with selinux in enforcing mode. + +policy_module(qpidd, 1.1) +require { + type initrc_t; + type ccs_t; + type aisexec_t; +} +#============= ccs_t ============== +fs_rw_tmpfs_files(ccs_t) +allow ccs_t initrc_t:sem rw_sem_perms; +allow ccs_t initrc_t:shm rw_shm_perms; +allow ccs_t self:capability ipc_owner; +allow aisexec_t initrc_t:sem rw_sem_perms; +allow aisexec_t initrc_t:shm rw_shm_perms; +allow aisexec_t self:capability { ipc_owner dac_override }; |