diff --git a/roles/base/files/postfix/zabbix-selinux.te b/roles/base/files/postfix/zabbix-selinux.te index 39c31f39e1..0a047fe622 100644 --- a/roles/base/files/postfix/zabbix-selinux.te +++ b/roles/base/files/postfix/zabbix-selinux.te @@ -1,4 +1,4 @@ -module zabbix_sendmail 1.5; +module zabbix_sendmail 1.6; require { type sendmail_exec_t; @@ -14,7 +14,7 @@ require { #============= zabbix_agent_t ============== # For the executing binaries allow zabbix_agent_t sendmail_exec_t:file { execute execute_no_trans }; -allow zabbix_agent_t postfix_postqueue_exec_t:file execute; +allow zabbix_agent_t postfix_postqueue_exec_t:file { execute execute_no_trans }; # For symlinks in /usr/bin and /usr/bin/mailq.postfix allow zabbix_agent_t bin_t:file { read execute execute_no_trans };