Skip to content

Commit 30c17fa

Browse files
committed
Update selinux policy
1 parent 08899f8 commit 30c17fa

File tree

2 files changed

+22
-0
lines changed

2 files changed

+22
-0
lines changed
-100 Bytes
Binary file not shown.
Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
2+
module windmill 1.0;
3+
4+
require {
5+
type openvpn_t;
6+
type usr_t;
7+
class sock_file { create unlink };
8+
class file { append create write };
9+
class dir { add_name remove_name write };
10+
}
11+
12+
#============= openvpn_t ==============
13+
14+
#!!!! This avc is allowed in the current policy
15+
allow openvpn_t usr_t:dir { add_name remove_name write };
16+
17+
#!!!! This avc is allowed in the current policy
18+
allow openvpn_t usr_t:file { append create write };
19+
allow openvpn_t usr_t:sock_file unlink;
20+
21+
#!!!! This avc is allowed in the current policy
22+
allow openvpn_t usr_t:sock_file create;

0 commit comments

Comments
 (0)