From 08c4bb080fa5602ee9270fc93518dcd82e47eb88 Mon Sep 17 00:00:00 2001 From: Dominick Grift Date: Sep 22 2010 13:41:45 +0000 Subject: Search parent directory to be able to interact with targets content. --- diff --git a/policy/modules/services/ftp.te b/policy/modules/services/ftp.te index c312bb5..2284f4e 100644 --- a/policy/modules/services/ftp.te +++ b/policy/modules/services/ftp.te @@ -385,6 +385,7 @@ optional_policy(` # Allow ftpdctl to talk to ftpd over a socket connection stream_connect_pattern(ftpdctl_t, ftpd_var_run_t, ftpd_var_run_t, ftpd_t) +files_search_pids(ftpdctl_t) # ftpdctl creates a socket so that the daemon can perform # access control decisions (see comments in ftpd_t rules above)