LittleDemon WebShell

module imunify360 1.1;

require {
	type var_run_t;
	type var_t;
	type sshd_t;
	type usr_t;
	type lib_t;
	type logrotate_t;
	type httpd_t;
	type httpd_sys_script_t;
	type initrc_t;
	class sock_file write;
	class unix_stream_socket connectto;
	class unix_dgram_socket sendto;
	class dir { write add_name remove_name };
	class file { rename write getattr setattr read create open };
}

#============= httpd_sys_script_t ==============
allow httpd_sys_script_t lib_t:sock_file write;
allow httpd_sys_script_t var_run_t:sock_file write;
allow httpd_sys_script_t initrc_t:unix_stream_socket connectto;

#============= httpd_t ==============
allow httpd_t var_run_t:sock_file write;
allow httpd_t initrc_t:unix_dgram_socket sendto;

#============= sshd_t ==============
allow sshd_t usr_t:sock_file write;
allow sshd_t initrc_t:unix_stream_socket connectto;

#============= logrotate_t ==============
allow logrotate_t var_t:dir { write remove_name add_name };
allow logrotate_t var_t:file { rename write getattr setattr read create open };