summaryrefslogtreecommitdiffstats
path: root/selinux/ipa_dogtag/ipa_dogtag.te
diff options
context:
space:
mode:
authorMartin Kosek <mkosek@redhat.com>2013-06-13 14:40:52 +0200
committerMartin Kosek <mkosek@redhat.com>2013-06-17 17:35:37 +0200
commitad6abdb576b2ebeb941eb99fd141bf78918143c1 (patch)
treec21d3ffddc79fb3b980f6353e46a7a637ef66378 /selinux/ipa_dogtag/ipa_dogtag.te
parent851b09183208ac90fc242dfcebff033de2757d5d (diff)
downloadfreeipa-ad6abdb576b2ebeb941eb99fd141bf78918143c1.tar.gz
freeipa-ad6abdb576b2ebeb941eb99fd141bf78918143c1.tar.xz
freeipa-ad6abdb576b2ebeb941eb99fd141bf78918143c1.zip
Drop SELinux subpackage
All SELinux policy needed by FreeIPA server is now part of the global system SELinux policy which makes the subpackage redundant and slowing down the installation. This patch drops it. https://fedorahosted.org/freeipa/ticket/3683 https://fedorahosted.org/freeipa/ticket/3684
Diffstat (limited to 'selinux/ipa_dogtag/ipa_dogtag.te')
-rw-r--r--selinux/ipa_dogtag/ipa_dogtag.te35
1 files changed, 0 insertions, 35 deletions
diff --git a/selinux/ipa_dogtag/ipa_dogtag.te b/selinux/ipa_dogtag/ipa_dogtag.te
deleted file mode 100644
index 713ea560b..000000000
--- a/selinux/ipa_dogtag/ipa_dogtag.te
+++ /dev/null
@@ -1,35 +0,0 @@
-module ipa_dogtag 2.0;
-
-require {
- type cert_t;
- type pki_tomcat_t;
- class dir write;
- class dir add_name;
- class dir remove_name;
- class dir search;
- class dir getattr;
- class file read;
- class file getattr;
- class file open;
- class file create;
- class file write;
- class file rename;
- class lnk_file create;
- class lnk_file rename;
- class lnk_file unlink;
-}
-
-# Let dogtag write to cert_t directories
-allow pki_tomcat_t cert_t:dir write;
-allow pki_tomcat_t cert_t:dir add_name;
-allow pki_tomcat_t cert_t:dir remove_name;
-
-# Let dogtag write cert_t files
-allow pki_tomcat_t cert_t:file create;
-allow pki_tomcat_t cert_t:file write;
-allow pki_tomcat_t cert_t:file rename;
-
-# Let dogtag manage cert_t symbolic links
-allow pki_tomcat_t cert_t:lnk_file create;
-allow pki_tomcat_t cert_t:lnk_file rename;
-allow pki_tomcat_t cert_t:lnk_file unlink;