Skip to content

Commit 4d2e3f5

Browse files
tjikkunPeter van Dijk
authored andcommitted
add selinux policy files
1 parent 063076b commit 4d2e3f5

File tree

3 files changed

+23
-0
lines changed

3 files changed

+23
-0
lines changed

contrib/selinux/pdns.fc

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
/usr/sbin/pdns_server -- gen_context(system_u:object_r:named_exec_t,s0)
2+
/etc/pdns/pdns\.conf -- gen_context(system_u:object_r:named_conf_t,s0)
3+
/var/run/pdns\.controlsocket -s gen_context(system_u:object_r:named_var_run_t,s0)
4+
/var/run/pdns\.pid -- gen_context(system_u:object_r:named_var_run_t,s0)
5+
/usr/bin/pdns_control -- gen_context(system_u:object_r:ndc_exec_t,s0)
6+
/usr/bin/pdnssec -- gen_context(system_u:object_r:ndc_exec_t,s0)

contrib/selinux/pdns.if

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
## <summary></summary>

contrib/selinux/pdns.te

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
policy_module(pdns,0.9.0)
2+
3+
require{
4+
type named_t;
5+
}
6+
7+
#only needed if using the guardian
8+
allow named_t self:capability { kill };
9+
10+
#gmysql backend:
11+
mysql_read_config(named_t)
12+
files_read_usr_files(named_t)
13+
mysql_stream_connect(named_t)
14+
15+
#postgres backend:
16+
postgresql_stream_connect(named_t)

0 commit comments

Comments
 (0)