module my-octavecli73 1.0; require { type httpd_sys_script_t; type httpd_sys_content_t; class file { append create write }; class dir { add_name write }; } #============= httpd_sys_script_t ============== #!!!! This avc is allowed in the current policy allow httpd_sys_script_t httpd_sys_content_t:dir { add_name write }; #!!!! This avc is allowed in the current policy allow httpd_sys_script_t httpd_sys_content_t:file { append create }; #!!!! This avc can be allowed using the boolean 'httpd_unified' allow httpd_sys_script_t httpd_sys_content_t:file write;