WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-03-20 03:57:02 +08:00
Code Issues Packages Projects Releases Wiki Activity

Collectd: add one more selinux permission

Browse Source 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
This commit is contained in:
Aurélien Bompard
2023-05-26 14:54:32 +02:00
parent 33d6594397
commit 45ad0573f3
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

BIN
roles/collectd/base/files/selinux/fi-collectd.mod
View File

Binary file not shown.

BIN
roles/collectd/base/files/selinux/fi-collectd.pp
View File

Binary file not shown.

6
roles/collectd/base/files/selinux/fi-collectd.te
View File

@@ -1,4 +1,4 @@
module fi-collectd 1.11.0;
module fi-collectd 1.11.1;
require {
type shell_exec_t;
@@ -22,7 +22,7 @@ require {
class lnk_file read;
class sock_file { read write getattr };
class unix_stream_socket connectto;
class netlink_generic_socket create;
class netlink_generic_socket { create bind };
}
#============= collectd_t ==============
@@ -41,4 +41,4 @@ allow collectd_t var_run_t:sock_file { read write getattr };
allow collectd_t anon_inodefs_t:file { write read };
allow collectd_t initrc_t:unix_stream_socket connectto;
allow collectd_t proc_net_t:lnk_file read;
allow collectd_t self:netlink_generic_socket create;
allow collectd_t self:netlink_generic_socket { create bind };