a078c4a [selinux] allow frontend's apache to ioctl uploaded tarballs

Authored and Committed by praiskup 5 years ago
    [selinux] allow frontend's apache to ioctl uploaded tarballs
    
    Resolves those warnings:
    type=AVC msg=audit(1536733036.786:132): avc:  denied  { ioctl }
    for  pid=991 comm="httpd"
    path="/var/lib/copr/data/srpm_storage/tmpricdq2lf/dummy-pkg-20180912_0817-0.src.rpm"
    dev="vda1" ino=266497 ioctlcmd=0x5401
    scontext=system_u:system_r:httpd_t:s0
    tcontext=system_u:object_r:copr_data_t:s0 tclass=file
    permissive=0
    
        
file modified
+1 -1