Skip to content

Commit

Permalink
updated selinux rules
Browse files Browse the repository at this point in the history
  • Loading branch information
mbhangui committed Jul 6, 2023
1 parent 3d7e3df commit 261c809
Showing 1 changed file with 8 additions and 20 deletions.
28 changes: 8 additions & 20 deletions mpd_local.te
Original file line number Diff line number Diff line change
@@ -1,40 +1,28 @@
module mpd_local 1.0;

require {
type var_run_t;
type automount_t;
type unconfined_service_t;
type alsa_home_t;
type alsa_var_lib_t;
type config_home_t;
type mpd_t;
type mpd_home_t;
type mpd_port_t;
type mpd_t;
type nfs_t;
type unconfined_service_t;
type user_home_dir_t;
class sock_file write;
class unix_stream_socket connectto;
class file { getattr open read };
type var_run_t;
class dir { search };
class file { getattr open read };
class sock_file write;
class tcp_socket { listen name_bind name_connect accept create node_bind setopt bind getattr };
class unix_stream_socket connectto;
}
#============= mpd_t ==============
allow mpd_t alsa_home_t:file { getattr open read };
allow mpd_t alsa_var_lib_t:dir search;
allow mpd_t unconfined_service_t:unix_stream_socket connectto;
allow mpd_t var_run_t:sock_file write;

#============= automount_t ==============
allow automount_t var_run_t:sock_file write;

#!!!! This avc is allowed in the current policy
allow mpd_t config_home_t:dir search;

#!!!! This avc is allowed in the current policy
allow mpd_t mpd_port_t:tcp_socket name_connect;

#!!!! This avc is allowed in the current policy
allow mpd_t nfs_t:dir search;

#!!!! This avc is allowed in the current policy
allow mpd_t var_run_t:sock_file write;
allow mpd_t user_home_dir_t:dir search;
allow mpd_t unconfined_service_t:unix_stream_socket connectto;

0 comments on commit 261c809

Please sign in to comment.