Re: Allow file access to two different domains

Gionatan Danti <[email protected]> Mon, 31 Oct 2022 19:25:04 +0100
Newsgroups gmane.linux.redhat.fedora.selinux
Message-ID <[email protected]>
Il 2022-10-31 18:14 Petr Lautrbach ha scritto:

> If you need to share files between 2 different generic domains, you 
> need
> to add rules to allow the access. For example, for the domain
> myprocess_t and files in /var/www/html, which is labeled as
> httpd_sys_content_t, you would use a module like this:
> 
> # cat > myprocess_httpd.cil <<EOF
> (allow myprocess_t  httpd_sys_content_t (dir ( getattr open search )))
> (allow myprocess_t  httpd_sys_content_t (file ( getattr ioctl lock open 
> read )))
> EOF
> 
> # semodule -i myprocess_httpd.cil

Hi Petr,
thanks for confirming.

Regards.

-- 
Danti Gionatan
Supporto Tecnico
Assyoma S.r.l. - www.assyoma.it
email: [email protected] - [email protected]
GPG public key ID: FF5F32A8
_______________________________________________
selinux mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue