Neverallow in http policy

[Divya Vyas <dvyas@xxxxxxxxxx>]

Hi,

How do I write a policy rule to stop http server reading /etc/passwd file.

neverallow ~can_read_shadow_passwords httpd_t:file read;

Will this work?

_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.