12 lines
No EOL
763 B
Text
12 lines
No EOL
763 B
Text
(block postgres
|
|
(blockinherit container)
|
|
(blockinherit restricted_net_container)
|
|
(allow process process ( capability ( chown dac_override fowner fsetid kill net_bind_service setfcap setgid setpcap setuid sys_chroot )))
|
|
|
|
(allow process postgresql_port_t ( tcp_socket ( name_bind )))
|
|
(allow container_t default_t (dir (setattr)))
|
|
(allow process default_t ( dir ( add_name create getattr ioctl lock open read remove_name rmdir search setattr write )))
|
|
(allow process default_t ( file ( append create getattr ioctl lock map open read rename setattr unlink write link)))
|
|
(allow process default_t ( fifo_file ( getattr read write append ioctl lock open )))
|
|
(allow process default_t ( sock_file ( append getattr open read write )))
|
|
) |