You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@qpid.apache.org by ac...@apache.org on 2010/07/15 21:42:23 UTC
svn commit: r964551 - in /qpid/trunk/qpid/cpp/etc/selinux: ./ qpidd.te
Author: aconway
Date: Thu Jul 15 19:42:23 2010
New Revision: 964551
URL: http://svn.apache.org/viewvc?rev=964551&view=rev
Log:
Selinux policy module needed to run a qpid cluster with selinux in enforcing mode.
Added:
qpid/trunk/qpid/cpp/etc/selinux/
qpid/trunk/qpid/cpp/etc/selinux/qpidd.te
Added: qpid/trunk/qpid/cpp/etc/selinux/qpidd.te
URL: http://svn.apache.org/viewvc/qpid/trunk/qpid/cpp/etc/selinux/qpidd.te?rev=964551&view=auto
==============================================================================
--- qpid/trunk/qpid/cpp/etc/selinux/qpidd.te (added)
+++ qpid/trunk/qpid/cpp/etc/selinux/qpidd.te Thu Jul 15 19:42:23 2010
@@ -0,0 +1,16 @@
+# selinux policy module needed to run a qpid cluster with selinux in enforcing mode.
+
+policy_module(qpidd, 1.1)
+require {
+ type initrc_t;
+ type ccs_t;
+ type aisexec_t;
+}
+#============= ccs_t ==============
+fs_rw_tmpfs_files(ccs_t)
+allow ccs_t initrc_t:sem rw_sem_perms;
+allow ccs_t initrc_t:shm rw_shm_perms;
+allow ccs_t self:capability ipc_owner;
+allow aisexec_t initrc_t:sem rw_sem_perms;
+allow aisexec_t initrc_t:shm rw_shm_perms;
+allow aisexec_t self:capability { ipc_owner dac_override };
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:commits-subscribe@qpid.apache.org