rocky 8 change

nginx · Sep 6, 2023 · 3d1e909 · 3d1e909
1 parent c3739d7
commit 3d1e909
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/scripts/selinux/nginx_agent.pp b/scripts/selinux/nginx_agent.pp
diff --git a/scripts/selinux/nginx_agent.te b/scripts/selinux/nginx_agent.te
@@ -62,6 +62,7 @@ require {
 	type sssd_public_t;
 	type sssd_var_lib_t;
 	type net_conf_t;
+	type fixed_disk_device_t;
 }
 
 allow nginx_agent_t bin_t:file { execute execute_no_trans };
@@ -141,3 +142,4 @@ allow nginx_agent_t sssd_public_t:dir search;
 allow nginx_agent_t sssd_var_lib_t:dir search;
 allow nginx_agent_t net_conf_t:file { getattr open read };
 allow nginx_agent_t self:udp_socket { connect create getattr setopt };
+allow nginx_agent_t fixed_disk_device_t:blk_file getattr;