Merge pull request #312 from OSC/fix-selinux

Fix selinux policy
OSC · Nov 18, 2019 · 9039f02 · 9039f02
2 parents 05cd1de + bd6826f
commit 9039f02
Showing 1 changed file with 5 additions and 4 deletions.
diff --git a/packaging/ondemand-selinux.te b/packaging/ondemand-selinux.te
@@ -11,6 +11,7 @@ require {
   type sshd_key_t;
   type chkpwd_t;
   type initrc_var_run_t;
+  type user_home_dir_t;
   class chr_file { ioctl open read write };
   class fifo_file { create getattr ioctl open read setattr unlink write };
   class netlink_audit_socket { nlmsg_relay create write };
@@ -23,10 +24,10 @@ require {
 #============= httpd_t ==============
 
 # Allow management of home directories when they are local
-manage_dirs_pattern(httpd_t, user_home_dir_t, user_home_dir_t)
-manage_files_pattern(httpd_t, user_home_dir_t, user_home_dir_t)
-manage_dirs_pattern(httpd_sys_script_t, user_home_dir_t, user_home_dir_t)
-manage_files_pattern(httpd_sys_script_t, user_home_dir_t, user_home_dir_t)
+manage_dirs_pattern(httpd_t, user_home_dir_t, user_home_dir_t);
+manage_files_pattern(httpd_t, user_home_dir_t, user_home_dir_t);
+manage_dirs_pattern(httpd_sys_script_t, user_home_dir_t, user_home_dir_t);
+manage_files_pattern(httpd_sys_script_t, user_home_dir_t, user_home_dir_t);
 
 # PUN startup
 allow httpd_t chkpwd_t:process { noatsecure rlimitinh siginh };