1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
|
--- contrib.orig/nginx.te 2012-11-24 19:52:13.439337617 +0100
+++ contrib/nginx.te 2012-11-24 18:34:57.565327680 +0100
@@ -124,33 +124,33 @@
sysnet_dns_name_resolve(nginx_t)
-tunable_policy(`gentoo_nginx_enable_http_server',`
+tunable_policy(`nginx_enable_http_server',`
corenet_tcp_bind_http_port(nginx_t)
apache_read_all_content(nginx_t)
apache_manage_all_rw_content(nginx_t)
')
# We enable both binding and connecting, since nginx acts here as a reverse proxy
-tunable_policy(`gentoo_nginx_enable_imap_server',`
+tunable_policy(`nginx_enable_imap_server',`
corenet_tcp_bind_pop_port(nginx_t)
corenet_tcp_connect_pop_port(nginx_t)
')
-tunable_policy(`gentoo_nginx_enable_pop3_server',`
+tunable_policy(`nginx_enable_pop3_server',`
corenet_tcp_bind_pop_port(nginx_t)
corenet_tcp_connect_pop_port(nginx_t)
')
-tunable_policy(`gentoo_nginx_enable_smtp_server',`
+tunable_policy(`nginx_enable_smtp_server',`
corenet_tcp_bind_smtp_port(nginx_t)
corenet_tcp_connect_smtp_port(nginx_t)
')
-tunable_policy(`gentoo_nginx_can_network_connect_http',`
+tunable_policy(`nginx_can_network_connect_http',`
corenet_tcp_connect_http_port(nginx_t)
')
-tunable_policy(`gentoo_nginx_can_network_connect',`
+tunable_policy(`nginx_can_network_connect',`
corenet_tcp_connect_all_ports(nginx_t)
')
|
GitWeb
