module nginx_integration 1.0; require { type httpd_log_t; type httpd_t; class file setattr; } #============= httpd_t ============== allow httpd_t httpd_log_t:file setattr;