We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 071c64a commit 7967205Copy full SHA for 7967205
templates/unicorn_selinux_template
@@ -7,9 +7,18 @@ module nginx 1.1;
7
class sock_file write;
8
class dir search;
9
class unix_stream_socket connectto;
10
+ <% if @backup_upstream %>
11
+ type puppet_port_t;
12
+ class tcp_socket name_connect;
13
+ class tcp_socket name_bind;
14
+ <% end %>
15
}
16
17
#============= httpd_t ==============
18
allow httpd_t puppet_var_run_t:sock_file write;
19
allow httpd_t puppet_var_run_t:dir search;
20
allow httpd_t init_t:unix_stream_socket connectto;
21
+<% if @backup_upstream %>
22
+allow httpd_t transproxy_port_t:tcp_socket name_bind;
23
+allow httpd_t puppet_port_t:tcp_socket name_connect;
24
+<% end %>
0 commit comments