selinux/ipa_httpd/ipa_httpd.te


1
2
3
4
5
6
7
8
9
10
11

module ipa_httpd 2.0;

require {
        type httpd_t;
        type cert_t;
        class file write;
}

# Let Apache access the NSS certificate database so it can issue certs
# See ipa_httpd.fc for the list of files that are granted write access
allow httpd_t cert_t:file write;