module mod_passenger 0.4; require { type httpd_t; # mod_passenger < 2.1 class fifo_file { read write unlink create getattr }; # mod_passenger >= 2.1 class sock_file { read write unlink create getattr }; type tmp_t; type lib_t; class file execute_no_trans; } #============= httpd_t ============== allow httpd_t lib_t:file execute_no_trans; allow httpd_t tmp_t:fifo_file { read write unlink create getattr }; allow httpd_t httpd_tmp_t:sock_file { read write unlink create getattr }; allow httpd_t tmp_t:sock_file { read write unlink create getattr };