mirror of
https://github.com/swissmakers/fail2ban-ui.git
synced 2026-04-11 13:47:05 +02:00
Release first dockerfile, first documentation etc.. Update will follow
This commit is contained in:
BIN
deployment/container/SELinux/fail2ban-container-client.mod
Normal file
BIN
deployment/container/SELinux/fail2ban-container-client.mod
Normal file
Binary file not shown.
BIN
deployment/container/SELinux/fail2ban-container-client.pp
Normal file
BIN
deployment/container/SELinux/fail2ban-container-client.pp
Normal file
Binary file not shown.
29
deployment/container/SELinux/fail2ban-container-client.te
Normal file
29
deployment/container/SELinux/fail2ban-container-client.te
Normal file
@@ -0,0 +1,29 @@
|
||||
|
||||
module fail2ban-container-client 1.0;
|
||||
|
||||
require {
|
||||
type fail2ban_t;
|
||||
type fail2ban_client_t;
|
||||
type fail2ban_var_run_t;
|
||||
type container_file_t;
|
||||
type httpd_log_t;
|
||||
type container_t;
|
||||
type var_log_t;
|
||||
class sock_file write;
|
||||
class unix_stream_socket connectto;
|
||||
class dir { read search open };
|
||||
class file { read open getattr };
|
||||
}
|
||||
|
||||
#============= container_t ==============
|
||||
allow container_t fail2ban_t:unix_stream_socket connectto;
|
||||
allow container_t fail2ban_var_run_t:sock_file write;
|
||||
allow container_t httpd_log_t:dir { read search open };
|
||||
allow container_t httpd_log_t:file { read open getattr };
|
||||
allow container_t var_log_t:dir { read search open };
|
||||
allow container_t var_log_t:file { read open getattr };
|
||||
|
||||
#============= fail2ban_client_t ==============
|
||||
allow fail2ban_client_t container_file_t:dir { read search open };
|
||||
allow fail2ban_client_t container_file_t:file { read open getattr };
|
||||
allow fail2ban_client_t container_file_t:sock_file write;
|
||||
BIN
deployment/container/SELinux/fail2ban-container-ui.pp
Normal file
BIN
deployment/container/SELinux/fail2ban-container-ui.pp
Normal file
Binary file not shown.
13
deployment/container/SELinux/fail2ban-container-ui.te
Normal file
13
deployment/container/SELinux/fail2ban-container-ui.te
Normal file
@@ -0,0 +1,13 @@
|
||||
|
||||
module fail2ban-container-ui 1.0;
|
||||
|
||||
require {
|
||||
type fail2ban_log_t;
|
||||
type etc_t;
|
||||
type container_t;
|
||||
class file { open read write };
|
||||
}
|
||||
|
||||
#============= container_t ==============
|
||||
allow container_t etc_t:file write;
|
||||
allow container_t fail2ban_log_t:file { open read };
|
||||
Reference in New Issue
Block a user