diff --git a/refpolicy/policy/modules/services/apache.if b/refpolicy/policy/modules/services/apache.if index 4d17f49..a11c412 100644 --- a/refpolicy/policy/modules/services/apache.if +++ b/refpolicy/policy/modules/services/apache.if @@ -472,6 +472,26 @@ interface(`apache_dontaudit_rw_tcp_sockets',` ######################################## ## +## Create, read, write, and delete all web content. +## +## +## +## Domain allowed access. +## +## +# +interface(`apache_manage_all_content',` + gen_require(` + attribute httpdcontent; + ') + + allow $1 httpdcontent:dir manage_dir_perms; + allow $1 httpdcontent:file manage_file_perms; + allow $1 httpdcontent:lnk_file create_lnk_perms; +') + +######################################## +## ## Allow the specified domain to read ## and write Apache cache files. ##