######################################## ## ## Read apache system read/write content. ## ## ## ## Domain allowed access. ## ## # interface(`apache_read_sys_content_rw',` gen_require(` type httpd_sys_content_rw_t; ') allow $1 httpd_sys_content_rw_t:dir list_dir_perms; read_files_pattern($1, httpd_sys_content_rw_t, httpd_sys_content_rw_t) read_lnk_files_pattern($1, httpd_sys_content_rw_t, httpd_sys_content_rw_t) ') ######################################## ## ## Do not audit attempts to read and write Apache ## system read/write content files. ## ## ## ## Domain allowed access. ## ## # interface(`apache_dontaudit_rw_sys_content_rw_files',` gen_require(` type httpd_sys_content_rw_t; ') dontaudit $1 httpd_sys_content_rw_t:file { read write }; ')