aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorKenton Groombridge <concord@gentoo.org>2024-06-27 13:47:49 -0400
committerJason Zaman <perfinion@gentoo.org>2024-09-21 15:28:29 -0700
commitf96789fa891ee6462843cebb80292368544c6a53 (patch)
tree10f70f04372c3e3e3757fbe18797cfa47131e02c /policy/modules
parentpostfix: allow postfix pipe to watch mail spool (diff)
downloadhardened-refpolicy-f96789fa891ee6462843cebb80292368544c6a53.tar.gz
hardened-refpolicy-f96789fa891ee6462843cebb80292368544c6a53.tar.bz2
hardened-refpolicy-f96789fa891ee6462843cebb80292368544c6a53.zip
asterisk: allow reading certbot lib
Signed-off-by: Kenton Groombridge <concord@gentoo.org> Signed-off-by: Jason Zaman <perfinion@gentoo.org>
Diffstat (limited to 'policy/modules')
-rw-r--r--policy/modules/services/asterisk.te4
1 files changed, 4 insertions, 0 deletions
diff --git a/policy/modules/services/asterisk.te b/policy/modules/services/asterisk.te
index 65fcbb4bc..004384bf1 100644
--- a/policy/modules/services/asterisk.te
+++ b/policy/modules/services/asterisk.te
@@ -160,6 +160,10 @@ optional_policy(`
')
optional_policy(`
+ certbot_read_lib(asterisk_t)
+')
+
+optional_policy(`
mysql_stream_connect(asterisk_t)
mysql_tcp_connect(asterisk_t)
')