blob: 84b39e3321c76cdcbe2625838886e82686df1347 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
|
module ipa_httpd 1.0;
require {
type httpd_t;
type initrc_t;
type var_run_t;
type krb5kdc_t;
class sock_file write;
class unix_stream_socket connectto;
}
# Let Apache and the KDC talk to DS over ldapi
allow httpd_t var_run_t:sock_file write;
allow httpd_t initrc_t:unix_stream_socket connectto;
allow krb5kdc_t var_run_t:sock_file write;
allow krb5kdc_t initrc_t:unix_stream_socket connectto;
|