diff options
| author | alee <alee@c9f7a03b-bd48-0410-a16d-cbbf54688b0b> | 2010-01-22 16:14:47 +0000 |
|---|---|---|
| committer | alee <alee@c9f7a03b-bd48-0410-a16d-cbbf54688b0b> | 2010-01-22 16:14:47 +0000 |
| commit | 8e6242ba9fbd97b88e165a203f760dfce30cfc5e (patch) | |
| tree | 4eebbfb5d4edf570d6f39ed539d063afa08a8c21 /pki | |
| parent | 2fabf12357855e4b9b21c68384d61e5f1067f20e (diff) | |
| download | pki-8e6242ba9fbd97b88e165a203f760dfce30cfc5e.tar.gz pki-8e6242ba9fbd97b88e165a203f760dfce30cfc5e.tar.xz pki-8e6242ba9fbd97b88e165a203f760dfce30cfc5e.zip | |
use macro instead of open() to allow epel build
git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@935 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
Diffstat (limited to 'pki')
| -rw-r--r-- | pki/base/selinux/src/pki.if | 6 |
1 files changed, 2 insertions, 4 deletions
diff --git a/pki/base/selinux/src/pki.if b/pki/base/selinux/src/pki.if index aa78cec3c..cbbdd4722 100644 --- a/pki/base/selinux/src/pki.if +++ b/pki/base/selinux/src/pki.if @@ -492,8 +492,7 @@ template(`pki_tps_template',` #============= httpd_t ============== allow httpd_t $1_var_run_t:dir search; - allow httpd_t $1_var_run_t:file read; - allow httpd_t $1_var_run_t:file open; + allow httpd_t $1_var_run_t:file read_file_perms; # start up httpd in pki_tps_t mode allow pki_tps_t httpd_config_t:file { read getattr execute }; @@ -675,8 +674,7 @@ template(`pki_ra_template',` #============= httpd_t ============== allow httpd_t $1_var_run_t:dir search; - allow httpd_t $1_var_run_t:file read; - allow httpd_t $1_var_run_t:file open; + allow httpd_t $1_var_run_t:file read_file_perms; # start up httpd in pki_ra_t mode allow pki_ra_t httpd_config_t:file { read getattr execute }; |