Skip to content

Instantly share code, notes, and snippets.

@gorozco1

gorozco1/cc-proxy.te

Last active January 20, 2017 17:50
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save gorozco1/0e28abb6b8d20939ba2f842a14ac9053 to your computer and use it in GitHub Desktop.
Save gorozco1/0e28abb6b8d20939ba2f842a14ac9053 to your computer and use it in GitHub Desktop.
Download ZIP
selinux module to allow cc-proxy to run
Raw
cc-proxy.te
cc-proxy.te
module cc-proxy 1.0;
require {
type init_t;
type unconfined_service_t;
class unix_stream_socket { bind create listen setopt };
}
#============= init_t ==============
allow init_t unconfined_service_t:unix_stream_socket listen;
#!!!! This avc is allowed in the current policy
allow init_t unconfined_service_t:unix_stream_socket { bind create setopt };
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment