diff options
Diffstat (limited to 'policy/modules/services/ldap.fc')
| -rw-r--r-- | policy/modules/services/ldap.fc | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/policy/modules/services/ldap.fc b/policy/modules/services/ldap.fc new file mode 100644 index 000000000..174f4d73b --- /dev/null +++ b/policy/modules/services/ldap.fc @@ -0,0 +1,32 @@ +/etc/ldap/slapd\.conf -- gen_context(system_u:object_r:slapd_etc_t,s0) +/etc/openldap/certs(/.*)? gen_context(system_u:object_r:slapd_cert_t,s0) +/etc/openldap/slapd\.d(/.*)? gen_context(system_u:object_r:slapd_db_t,s0) + +/etc/rc\.d/init\.d/ldap -- gen_context(system_u:object_r:slapd_initrc_exec_t,s0) + +/usr/bin/slapd -- gen_context(system_u:object_r:slapd_exec_t,s0) + +/usr/sbin/slapd -- gen_context(system_u:object_r:slapd_exec_t,s0) + +/usr/lib/openldap/slapd -- gen_context(system_u:object_r:slapd_exec_t,s0) +/usr/lib/slapd -- gen_context(system_u:object_r:slapd_exec_t,s0) +/usr/lib/systemd/system/slapd.*\.service -- gen_context(system_u:object_r:slapd_unit_t,s0) + +/var/lib/ldap(/.*)? gen_context(system_u:object_r:slapd_db_t,s0) +/var/lib/ldap/replog(/.*)? gen_context(system_u:object_r:slapd_replog_t,s0) + +/var/lib/openldap-data(/.*)? gen_context(system_u:object_r:slapd_db_t,s0) +/var/lib/openldap-ldbm(/.*)? gen_context(system_u:object_r:slapd_db_t,s0) +/var/lib/openldap-slurpd(/.*)? gen_context(system_u:object_r:slapd_db_t,s0) + +/var/lock/subsys/ldap -- gen_context(system_u:object_r:slapd_lock_t,s0) +/var/lock/subsys/slapd -- gen_context(system_u:object_r:slapd_lock_t,s0) + +/var/log/ldap.* gen_context(system_u:object_r:slapd_log_t,s0) +/var/log/slapd.* gen_context(system_u:object_r:slapd_log_t,s0) + +/run/ldapi -s gen_context(system_u:object_r:slapd_var_run_t,s0) +/run/openldap(/.*)? gen_context(system_u:object_r:slapd_var_run_t,s0) +/run/slapd.* -s gen_context(system_u:object_r:slapd_var_run_t,s0) +/run/slapd\.args -- gen_context(system_u:object_r:slapd_var_run_t,s0) +/run/slapd\.pid -- gen_context(system_u:object_r:slapd_var_run_t,s0) |