xNightR00T File Manager

module zend 7.0.1;

require {
	type init_t;
	type httpd_t;
	type httpd_unit_file_t;
	type unreserved_port_t;
	type httpd_sys_content_t;
	type httpd_tmp_t;
 	type systemd_systemctl_exec_t;
	type unconfined_service_t;
	type usr_t;
	type proc_t;
	class process execmem;
	class file write;
	class dir { remove_name read write };
	class tcp_socket name_bind;
	class file unlink;
	class dir create;
	class unix_stream_socket connectto;
	class dir search;
	class lnk_file read;
	class file { execute execute_no_trans getattr open read };
	class sem { associate unix_read unix_write };
	class service { start status };
	class capability { ipc_owner };
	class capability net_admin;
	class capability fsetid;
	class file map;
	class icmp_socket create;
	class rawip_socket create;
}

#============= httpd_t ==============
allow httpd_t init_t:dir search;
allow httpd_t init_t:file { getattr open read };
allow httpd_t init_t:lnk_file read;
allow httpd_t init_t:unix_stream_socket connectto;
allow httpd_t systemd_systemctl_exec_t:file { execute execute_no_trans open read };
allow httpd_t unconfined_service_t:sem { associate unix_read unix_write };
allow httpd_t httpd_unit_file_t:service { start status };
allow httpd_t self:capability net_admin;
allow httpd_t self:capability fsetid;
allow httpd_t self:capability ipc_owner;
allow httpd_t httpd_sys_content_t:file write;
allow httpd_t self:process execmem;
allow httpd_t unreserved_port_t:tcp_socket name_bind;
allow httpd_t proc_t:file map;
allow httpd_t self:icmp_socket create;
allow httpd_t self:rawip_socket create;
allow httpd_t usr_t:file write;
#============= init_t / systemd ======
allow init_t usr_t:dir create;
allow init_t usr_t:file unlink;
allow init_t httpd_tmp_t:dir { read write };
allow init_t httpd_tmp_t:dir write;
allow init_t httpd_tmp_t:dir remove_name;