Re: allowing in.tftpd to read/write files?

[Chuck Anderson <cra WPI EDU>]

On Fri, Oct 19, 2007 at 02:42:33PM -0400, Chuck Anderson wrote:
> How do I allow tftpd to write files?

I ended up creating the following local policy.  Should this type of 
thing be put into the standard policy package?

#cat /root/tftp.te 

module tftp 1.0;

require {
        type public_content_t;
        type tftpd_t;
        type public_content_rw_t;
        class dir search;
        class file { read write getattr };
}

#============= tftpd_t ==============
allow tftpd_t public_content_rw_t:file { write read getattr };
allow tftpd_t public_content_t:dir search;
allow tftpd_t public_content_t:file { read getattr };