diff options
Diffstat (limited to 'selinux/ipa_dogtag')
| -rw-r--r-- | selinux/ipa_dogtag/ipa_dogtag.te | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/selinux/ipa_dogtag/ipa_dogtag.te b/selinux/ipa_dogtag/ipa_dogtag.te index 937d9a248..3750e4d10 100644 --- a/selinux/ipa_dogtag/ipa_dogtag.te +++ b/selinux/ipa_dogtag/ipa_dogtag.te @@ -1,4 +1,4 @@ -module ipa_dogtag 1.3; +module ipa_dogtag 1.4; require { type httpd_t; @@ -15,6 +15,7 @@ require { class file rename; class lnk_file create; class lnk_file rename; + class lnk_file unlink; } # Let dogtag write to cert_t directories @@ -30,6 +31,7 @@ allow pki_ca_t cert_t:file rename; # Let dogtag manage cert_t symbolic links allow pki_ca_t cert_t:lnk_file create; allow pki_ca_t cert_t:lnk_file rename; +allow pki_ca_t cert_t:lnk_file unlink; # Let apache read the CRLs allow httpd_t pki_ca_var_lib_t:dir { search getattr }; |