[09:03:23] I think I'll just paste here the selinux allow rules generated by 'ausearch -ts recent -m avc | audit2allow -M mygf' on fedora 29 in a file called mygf.te. [09:03:45] It will be searchable through the irc logs. [09:04:03] module mygf 1.0; [09:04:06] require { [09:04:08] type sysctl_fs_t; [09:04:10] type httpd_sys_rw_content_t; [09:04:12] type httpd_sys_script_t; [09:04:14] type tmpfs_t; [09:04:16] type var_lib_nfs_t; [09:04:18] class process { execheap execmem }; [09:04:20] class file { execute map }; [09:04:22] class dir { add_name search write }; [09:04:24] } [13:36:48] hehe yeah that works too