File tree Expand file tree Collapse file tree 3 files changed +23
-0
lines changed Expand file tree Collapse file tree 3 files changed +23
-0
lines changed Original file line number Diff line number Diff line change
1
+ /usr/sbin/pdns_server -- gen_context(system_u:object_r:named_exec_t,s0)
2
+ /etc/pdns/pdns\.conf -- gen_context(system_u:object_r:named_conf_t,s0)
3
+ /var/run/pdns\.controlsocket -s gen_context(system_u:object_r:named_var_run_t,s0)
4
+ /var/run/pdns\.pid -- gen_context(system_u:object_r:named_var_run_t,s0)
5
+ /usr/bin/pdns_control -- gen_context(system_u:object_r:ndc_exec_t,s0)
6
+ /usr/bin/pdnssec -- gen_context(system_u:object_r:ndc_exec_t,s0)
Original file line number Diff line number Diff line change
1
+ ## <summary></summary>
Original file line number Diff line number Diff line change
1
+ policy_module(pdns,0 .9 .0 )
2
+
3
+ require {
4
+ type named_t;
5
+ }
6
+
7
+ # only needed if using the guardian
8
+ allow named_t self:capability { kill };
9
+
10
+ # gmysql backend:
11
+ mysql_read_config(named_t)
12
+ files_read_usr_files(named_t)
13
+ mysql_stream_connect(named_t)
14
+
15
+ # postgres backend:
16
+ postgresql_stream_connect(named_t)
You can’t perform that action at this time.
0 commit comments