11 lines
No EOL
717 B
Text
11 lines
No EOL
717 B
Text
(block postgres
|
|
(blockinherit container)
|
|
(blockinherit restricted_net_container)
|
|
(allow process process ( capability ( chown dac_override fowner fsetid kill net_bind_service setfcap setgid setpcap setuid sys_chroot )))
|
|
|
|
(allow process postgresql_port_t ( tcp_socket ( name_bind )))
|
|
(allow process user_home_t ( dir ( add_name create getattr ioctl lock open read remove_name rmdir search setattr write )))
|
|
(allow process user_home_t ( file ( append create getattr ioctl lock map open read rename setattr unlink write )))
|
|
(allow process user_home_t ( fifo_file ( getattr read write append ioctl lock open )))
|
|
(allow process user_home_t ( sock_file ( append getattr open read write )))
|
|
) |