Editing EPrints and SELinux (section)

=== eprints.te ===
 module eprints 1.4;
 
 require {
         type httpd_sys_content_t;
         type httpd_sys_rw_content_t;
         type httpd_sys_script_exec_t;
         type httpd_sys_script_t;
         type httpd_t;
         type ldap_port_t;
         type lib_t;
         type init_t;
         type mysqld_t;
         type shadow_t;
         type unconfined_service_t;
         type unreserved_port_t;
         type usr_t;
         type var_run_t;
         class dir { add_name remove_name setattr };
         class file { create execute execute_no_trans getattr ioctl open read unlink write };
         class lnk_file { read };
         class sock_file { write };
         class tcp_socket{ name_connect };
         class unix_stream_socket { connectto };
 }
  
 # Required by the HTTP webserver
 allow init_t httpd_sys_content_t:file { create execute execute_no_trans ioctl open read };
 allow init_t httpd_sys_rw_content_t:dir { add_name remove_name };
 allow init_t httpd_sys_rw_content_t:file { create ioctl open read unlink write };
 allow init_t mysqld_t:unix_stream_socket { connectto };
 
 # Required by init processes
 allow init_t httpd_sys_content_t:file { create execute execute_no_trans ioctl open read };
 allow init_t httpd_sys_rw_content_t:dir { add_name remove_name };
 allow init_t httpd_sys_rw_content_t:file { create ioctl open read unlink write };
 allow init_t mysqld_t:unix_stream_socket { connectto };
 
 # Only needed for coversheets, considering commenting out otherwise.
 allow httpd_t lib_t:dir { setattr };
 allow httpd_t shadow_t:file { getattr open read };
 allow httpd_t usr_t:file { write };
 allow httpd_t unreserved_port_t:tcp_socket { name_connect };
 allow init_t httpd_sys_content_t:lnk_file { read };
 allow init_t httpd_sys_rw_content_t:file { create };
 allow init_t httpd_sys_rw_content_t:lnk_file { read };
 
 # Only needed for Shibboleth authentication, consider commenting out otherwise.
 allow httpd_t var_run_t:sock_file { write };
 allow httpd_t unconfined_service_t:unix_stream_socket { connectto };
 
 # Only need for LDAP authentication, consider commenting out otherwise.
 allow httpd_t ldap_port_t:tcp_socket { name_connect };