Skip to content

Commit dca1564

Browse files
ajhuh-mdbDave
andauthored
DOCSP-36304-Update-Selinux-Policy (#8408) (#8497)
* DOCS-15224 update selinux policy (#979) * DOCS-15224 update selinux policy * Vertical line space * Vertical line space * Vertical line space * * --------- Co-authored-by: Dave <[email protected]> (cherry picked from commit 65546d9)
1 parent f9314f3 commit dca1564

File tree

1 file changed

+16
-2
lines changed

1 file changed

+16
-2
lines changed

source/includes/fact-selinux-redhat-options.rst

Lines changed: 16 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -82,13 +82,27 @@ to your SELinux policy:
8282
module mongodb_proc_net 1.0;
8383
8484
require {
85-
type proc_net_t;
85+
type cgroup_t;
86+
type configfs_t;
87+
type file_type;
8688
type mongod_t;
87-
class file { open read };
89+
type proc_net_t;
90+
type sysctl_fs_t;
91+
type var_lib_nfs_t;
92+
93+
class dir { search getattr };
94+
class file { getattr open read };
8895
}
8996
9097
#============= mongod_t ==============
98+
allow mongod_t cgroup_t:dir { search getattr } ;
99+
allow mongod_t cgroup_t:file { getattr open read };
100+
allow mongod_t configfs_t:dir getattr;
101+
allow mongod_t file_type:dir { getattr search };
102+
allow mongod_t file_type:file getattr;
91103
allow mongod_t proc_net_t:file { open read };
104+
allow mongod_t sysctl_fs_t:dir search;
105+
allow mongod_t var_lib_nfs_t:dir search;
92106
EOF
93107
94108
#. Once created, compile and load the custom policy module by

0 commit comments

Comments
 (0)