summaryrefslogtreecommitdiffstats
path: root/base/selinux/src/pki.te
diff options
context:
space:
mode:
authorAde Lee <alee@redhat.com>2012-07-31 00:45:47 -0400
committerAde Lee <alee@redhat.com>2012-07-31 16:36:04 -0400
commitcff349cd4d2175eb920f9cab4998b4c3bfd0550a (patch)
tree4ee12431333099858ae463aed8cb6d126b111bf3 /base/selinux/src/pki.te
parentf589cc1e267d6d7b67a6463b4495b7a9c982669f (diff)
downloadpki-cff349cd4d2175eb920f9cab4998b4c3bfd0550a.tar.gz
pki-cff349cd4d2175eb920f9cab4998b4c3bfd0550a.tar.xz
pki-cff349cd4d2175eb920f9cab4998b4c3bfd0550a.zip
selinux policy changes to use standard ports
Selinux policy has been changed to use standard tomcat ports. Corresponding changes have been made in the pki-deploy scripts. Minor change in config script for password check.
Diffstat (limited to 'base/selinux/src/pki.te')
-rw-r--r--base/selinux/src/pki.te6
1 files changed, 2 insertions, 4 deletions
diff --git a/base/selinux/src/pki.te b/base/selinux/src/pki.te
index a91385ff2..cce797d7e 100644
--- a/base/selinux/src/pki.te
+++ b/base/selinux/src/pki.te
@@ -1,4 +1,4 @@
-policy_module(pki,10.0.5)
+policy_module(pki,10.0.6)
attribute pki_tomcat_config;
attribute pki_tomcat_executable;
@@ -21,8 +21,6 @@ files_type(pki_common_dev_t)
type pki_tomcat_tomcat_exec_t;
files_type(pki_tomcat_tomcat_exec_t)
-type pki_tomcat_port_t;
-corenet_port(pki_tomcat_port_t)
pki_tomcat_template(pki_tomcat)
# forward proxy
@@ -41,7 +39,7 @@ typealias pki_tomcat_etc_rw_t alias { pki_ca_etc_rw_t pki_kra_etc_rw_t pki_ocsp_
typealias pki_tomcat_var_lib_t alias { pki_ca_var_lib_t pki_kra_var_lib_t pki_ocsp_var_lib_t pki_tks_var_lib_t };
typealias pki_tomcat_var_run_t alias { pki_ca_var_run_t pki_kra_var_run_t pki_ocsp_var_run_t pki_tks_var_run_t };
typealias pki_tomcat_log_t alias { pki_ca_log_t pki_kra_log_t pki_ocsp_log_t pki_tks_log_t };
-
+# typealias http_port_t alias { pki_ca_port_t pki_kra_port_t pki_ocsp_port_t pki_tks_port_t };
attribute pki_ra_config;
attribute pki_ra_executable;
attribute pki_ra_var_lib;