Allow httpd_t domain to mmap own var_lib_t files BZ(1804853)

wrabcak · wrabcak · commit c7f0ae4c83c1 · 2020-02-20T13:57:38.000+01:00
diff --git a/apache.te b/apache.te
@@ -575,6 +575,7 @@ allow httpd_t httpd_tmpfs_t:file map;
 manage_dirs_pattern(httpd_t, httpd_var_lib_t, httpd_var_lib_t)
 manage_files_pattern(httpd_t, httpd_var_lib_t, httpd_var_lib_t)
 manage_lnk_files_pattern(httpd_t, httpd_var_lib_t, httpd_var_lib_t)
+allow httpd_t httpd_var_lib_t:file map;
 files_var_lib_filetrans(httpd_t, httpd_var_lib_t, { dir file })
 
 setattr_dirs_pattern(httpd_t, httpd_var_run_t, httpd_var_run_t)
