Blob Blame History Raw

policy_module(mediawiki, 1.0.0)

########################################
#
# Declarations
#

apache_content_template(mediawiki)

type httpd_mediawiki_tmp_t;
files_tmp_file(httpd_mediawiki_tmp_t)

permissive httpd_mediawiki_script_t;

########################################
#
# mediawiki local policy
#

manage_dirs_pattern(httpd_mediawiki_script_t, httpd_mediawiki_tmp_t, httpd_mediawiki_tmp_t)
manage_files_pattern(httpd_mediawiki_script_t, httpd_mediawiki_tmp_t, httpd_mediawiki_tmp_t)
manage_lnk_files_pattern(httpd_mediawiki_script_t, httpd_mediawiki_tmp_t, httpd_mediawiki_tmp_t)
files_tmp_filetrans(httpd_mediawiki_script_t, httpd_mediawiki_tmp_t, { file dir lnk_file })

files_search_var_lib(httpd_mediawiki_script_t)

userdom_read_user_tmp_files(httpd_mediawiki_script_t)

miscfiles_read_tetex_data(httpd_mediawiki_script_t)

optional_policy(`
	apache_dontaudit_rw_tmp_files(httpd_mediawiki_script_t)
')