074fd22
policy_module(pureftpd, 1.0)
074fd22
074fd22
require {
074fd22
	type ftpd_t;
Jaromir Capik 5ab9a6d
}
074fd22
074fd22
# Read /var/run/utmp
074fd22
init_read_utmp(ftpd_t)
074fd22
init_dontaudit_write_utmp(ftpd_t)
074fd22
074fd22
### Allow connect to mysql
074fd22
# Network connect
074fd22
corenet_tcp_connect_mysqld_port(ftpd_t)
074fd22
# Socket file connect
Jaromir Capik 5ab9a6d
optional_policy(`
Jaromir Capik 5ab9a6d
    mysql_stream_connect(ftpd_t)
Jaromir Capik 5ab9a6d
    mysql_rw_db_sockets(ftpd_t)
Jaromir Capik 5ab9a6d
')
074fd22
074fd22
### Allow connect to postgresql
074fd22
# Network connect
074fd22
corenet_tcp_connect_postgresql_port(ftpd_t)
074fd22
# Socket file connect
Jaromir Capik 5ab9a6d
optional_policy(`
Jaromir Capik 5ab9a6d
    postgresql_stream_connect(ftpd_t)
Jaromir Capik 5ab9a6d
')
074fd22
074fd22
# Allow connect to ldap
074fd22
sysnet_use_ldap(ftpd_t)