move selinux, firewalld, k3s
This commit is contained in:
23
active/os_fedora/selinux_policies/clamav-unixchkpwd.te
Normal file
23
active/os_fedora/selinux_policies/clamav-unixchkpwd.te
Normal file
@@ -0,0 +1,23 @@
|
||||
|
||||
module clamav-unixchkpwd 1.0;
|
||||
|
||||
require {
|
||||
type chkpwd_t;
|
||||
type user_devpts_t;
|
||||
type antivirus_t;
|
||||
type shadow_t;
|
||||
type init_t;
|
||||
class chr_file { read write };
|
||||
class file { getattr open read };
|
||||
class process siginh;
|
||||
}
|
||||
|
||||
#============= antivirus_t ==============
|
||||
allow antivirus_t shadow_t:file { open read };
|
||||
allow antivirus_t shadow_t:file getattr;
|
||||
|
||||
#============= chkpwd_t ==============
|
||||
allow chkpwd_t user_devpts_t:chr_file { read write };
|
||||
|
||||
#============= init_t ==============
|
||||
allow init_t chkpwd_t:process siginh;
|
||||
Reference in New Issue
Block a user