summaryrefslogtreecommitdiffstats
path: root/mod_lookup_identity.te
diff options
context:
space:
mode:
authorJan Pazdziora <jpazdziora@redhat.com>2014-06-25 10:55:30 +0200
committerJan Pazdziora <jpazdziora@redhat.com>2014-06-25 10:56:48 +0200
commitf5c3afea6a91335287f7a7ed9b48531bf9fd6427 (patch)
treea3b319f205b04d784f15260c6bb98c9f5fc0dda9 /mod_lookup_identity.te
downloadmod_lookup_identity-selinux-master.tar.gz
mod_lookup_identity-selinux-master.tar.xz
mod_lookup_identity-selinux-master.zip
SELinux module to allow httpd to talk to sssd via dbus.HEADmod_lookup_identity-selinux-1.0master
Diffstat (limited to 'mod_lookup_identity.te')
-rw-r--r--mod_lookup_identity.te11
1 files changed, 11 insertions, 0 deletions
diff --git a/mod_lookup_identity.te b/mod_lookup_identity.te
new file mode 100644
index 0000000..daf35ea
--- /dev/null
+++ b/mod_lookup_identity.te
@@ -0,0 +1,11 @@
+
+policy_module(mod_lookup_identity, 1.0)
+require {
+ type sssd_t;
+ type httpd_t;
+ class dbus send_msg;
+}
+
+allow httpd_t sssd_t:dbus send_msg;
+allow sssd_t httpd_t:dbus send_msg;
+