Skip to content

Commit 7967205

Browse files
author
Tim Meusel
committed
extend template for lb usage
1 parent 071c64a commit 7967205

File tree

1 file changed

+9
-0
lines changed

1 file changed

+9
-0
lines changed

templates/unicorn_selinux_template

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,9 +7,18 @@ module nginx 1.1;
77
class sock_file write;
88
class dir search;
99
class unix_stream_socket connectto;
10+
<% if @backup_upstream %>
11+
type puppet_port_t;
12+
class tcp_socket name_connect;
13+
class tcp_socket name_bind;
14+
<% end %>
1015
}
1116

1217
#============= httpd_t ==============
1318
allow httpd_t puppet_var_run_t:sock_file write;
1419
allow httpd_t puppet_var_run_t:dir search;
1520
allow httpd_t init_t:unix_stream_socket connectto;
21+
<% if @backup_upstream %>
22+
allow httpd_t transproxy_port_t:tcp_socket name_bind;
23+
allow httpd_t puppet_port_t:tcp_socket name_connect;
24+
<% end %>

0 commit comments

Comments
 (0)