You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
30 lines
539 B
30 lines
539 B
policy_module(anvil-subnode, 1.0.0) |
|
|
|
######################################## |
|
# |
|
# Declarations |
|
# |
|
|
|
|
|
######################################## |
|
# |
|
# Local policy |
|
# |
|
|
|
# Use existing types; don't declare unless it's new. |
|
# |
|
require { |
|
# type drbd_t; |
|
type mnt_t; |
|
type var_lock_t; |
|
type virsh_t; |
|
} |
|
|
|
|
|
#============= drbd_t ============== |
|
# allow drbd_t self:netlink_generic_socket { bind create getattr setopt }; |
|
# allow drbd_t var_lock_t:file { read lock open write }; |
|
|
|
|
|
#============= virsh_t ============== |
|
allow virsh_t mnt_t:file { open read };
|
|
|