## <summary>module for lighttpd</summary>

## <summary>
##      Allow the specified domain to read lighttpd configuration files.
## </summary>
## <param name="domain">
##      <summary>
##      Domain allowed access.
##      </summary>
## </param>
## <rolecap/>
#
interface(`lighttpd_read_config',`
        gen_require(`
                type lighttpd_config_t;
        ')

        files_search_etc($1)
        allow $1 lighttpd_config_t:dir list_dir_perms;
        read_files_pattern($1,lighttpd_config_t,lighttpd_config_t)
')


## <summary>
##      Allow the specified domain to read lighttpd log files.
## </summary>
## <param name="domain">
##      <summary>
##      Domain allowed access.
##      </summary>
## </param>
## <rolecap/>
#
interface(`lighttpd_read_log',`
        gen_require(`
                type lighttpd_log_t;
        ')

        logging_search_logs($1)
        allow $1 lighttpd_log_t:dir list_dir_perms;
        read_files_pattern($1,lighttpd_log_t,lighttpd_log_t)
')