Attachment 254701 Details for Bug 375651 – Rules created by autid2allow

Rules created by autid2allow

bugzilla_audit2allow_te.txt (text/plain), 1.99 KB, created by Féliciano Matias on 2007-11-11 16:12:50 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Féliciano Matias

Created: 2007-11-11 16:12:50 UTC

Size: 1.99 KB

patch

obsolete

>
>module bugzilla 1.0;
>
>require {
>	type postgresql_port_t;
>	type net_conf_t;
>	type httpd_bugzilla_script_t;
>	type tmp_t;
>	type http_port_t;
>	class tcp_socket { name_connect setopt read create ioctl write getattr connect getopt };
>	class dir { write remove_name getattr search add_name };
>	class udp_socket { write read create connect getattr };
>	class file { write getattr read create unlink ioctl };
>}
>
>#============= httpd_bugzilla_script_t ==============
># src="httpd_bugzilla_script_t" tgt="http_port_t" class="tcp_socket", perms="name_connect"
># comm="index.cgi" exe="" path=""
>allow httpd_bugzilla_script_t http_port_t:tcp_socket name_connect;
># src="httpd_bugzilla_script_t" tgt="net_conf_t" class="file", perms="{ read getattr }"
># comm="index.cgi" exe="" path=""
>allow httpd_bugzilla_script_t net_conf_t:file { read getattr };
># src="httpd_bugzilla_script_t" tgt="postgresql_port_t" class="tcp_socket", perms="name_connect"
># comm="index.cgi" exe="" path=""
>allow httpd_bugzilla_script_t postgresql_port_t:tcp_socket name_connect;
># src="httpd_bugzilla_script_t" tgt="httpd_bugzilla_script_t" class="tcp_socket", perms="{ setopt read create ioctl write getattr connect getopt }"
># comm="index.cgi" exe="" path=""
>allow httpd_bugzilla_script_t self:tcp_socket { setopt read create getattr write ioctl connect getopt };
># src="httpd_bugzilla_script_t" tgt="httpd_bugzilla_script_t" class="udp_socket", perms="{ write read create connect getattr }"
># comm="index.cgi" exe="" path=""
>allow httpd_bugzilla_script_t self:udp_socket { write read create connect getattr };
># src="httpd_bugzilla_script_t" tgt="tmp_t" class="dir", perms="{ write remove_name getattr search add_name }"
># comm="index.cgi" exe="" path=""
>allow httpd_bugzilla_script_t tmp_t:dir { write remove_name getattr search add_name };
># src="httpd_bugzilla_script_t" tgt="tmp_t" class="file", perms="{ read create getattr write ioctl unlink }"
># comm="post_bug.cgi" exe="" path=""
>allow httpd_bugzilla_script_t tmp_t:file { write getattr read create unlink ioctl };

Actions: View

Attachments on bug 375651: 254331 | 254341 | 254691 | 254701 | 254711 | 254721