From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Mon, 15 Sep 2008 09:30:29 -0400 Subject: [refpolicy] Updated squid policy In-Reply-To: <48B2F0F4.20003@redhat.com> References: <48B2F0F4.20003@redhat.com> Message-ID: <1221485429.24369.59.camel@gorn> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On Mon, 2008-08-25 at 13:50 -0400, Daniel J Walsh wrote: > http://people.fedoraproject.org/~dwalsh/SELinux/Policy/services_squid.patch > > Added httpd script policy > > binds to http port > > connects to pgpkey and wccp ports Merged except for this part: +#squid requires the following when run in diskd mode, the recommended setting +fs_rw_tmpfs_files(squid_t) which I suspect needs a filetrans. -- Chris PeBenito Tresys Technology, LLC (410) 290-1411 x150