The attached patch firstly adds support for some Debian paths to the Apache
policy and has some minor changes to the access granted to user content.
The biggest change is to have a new interface apache_script_exec_domain() for
creating types for Apache content which doesn't need to be optional. So the
types created by it can be used in a .fc file which will be included even if
apache.pp isn't loaded. This means that a module which has a script that
Apache might run won't depend on apache.pp.
--
My Main Blog http://etbe.coker.com.au/
My Documents Blog http://doc.coker.com.au/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: apache.diff
Type: text/x-patch
Size: 10653 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20111107/dbb4a57c/attachment.bin