We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 08899f8 commit 30c17faCopy full SHA for 30c17fa
deploy/roles/windmill/files/opt/windmill/openvpn/windmill.pp
-100 Bytes
deploy/roles/windmill/files/opt/windmill/openvpn/windmill.te
@@ -0,0 +1,22 @@
1
+
2
+module windmill 1.0;
3
4
+require {
5
+ type openvpn_t;
6
+ type usr_t;
7
+ class sock_file { create unlink };
8
+ class file { append create write };
9
+ class dir { add_name remove_name write };
10
+}
11
12
+#============= openvpn_t ==============
13
14
+#!!!! This avc is allowed in the current policy
15
+allow openvpn_t usr_t:dir { add_name remove_name write };
16
17
18
+allow openvpn_t usr_t:file { append create write };
19
+allow openvpn_t usr_t:sock_file unlink;
20
21
22
+allow openvpn_t usr_t:sock_file create;
0 commit comments