2025-07-04 09:00:19 +02:00

20 lines
535 B
Plaintext

module ufdb 1.4;
require {
type initrc_tmp_t;
type initrc_t;
type tmp_t;
type squid_t;
type unconfined_service_t;
type var_run_t;
class sock_file write;
class unix_stream_socket connectto;
}
#============= squid_t ==============
allow squid_t initrc_t:unix_stream_socket connectto;
allow squid_t unconfined_service_t:unix_stream_socket connectto;
allow squid_t initrc_tmp_t:sock_file write;
allow squid_t tmp_t:sock_file write;
allow squid_t var_run_t:sock_file write;