Skip to content

Instantly share code, notes, and snippets.

@pandanote-info
Created April 2, 2022 11:48
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save pandanote-info/22f8f78b185b0913f868987d77789a3e to your computer and use it in GitHub Desktop.
Save pandanote-info/22f8f78b185b0913f868987d77789a3e to your computer and use it in GitHub Desktop.
MongoDB用のType Enforcementファイルの作成例(var_lib_nfs_t用)。
module mongodb_var_lib_nfs 1.0;
require {
type mongod_t;
type var_lib_nfs_t;
class dir search;
class file { getattr read open };
}
#============= mongod_t ==============
allow mongod_t var_lib_nfs_t:dir search;
allow mongod_t var_lib_nfs_t:file { getattr read open };
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment