From 726be2fec262f10b42649d1dad5099336e8610e9 Mon Sep 17 00:00:00 2001 From: Dirk Goetz Date: Mon, 18 Mar 2019 19:43:47 +0100 Subject: [PATCH] SELinux: add unreserved_port_type attribute to icinga2_port_t Fixes #7029 --- tools/selinux/icinga2.te | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/tools/selinux/icinga2.te b/tools/selinux/icinga2.te index 1eea26a10..23632c3eb 100644 --- a/tools/selinux/icinga2.te +++ b/tools/selinux/icinga2.te @@ -1,4 +1,4 @@ -policy_module(icinga2, 0.1.7) +policy_module(icinga2, 0.1.8) ######################################## # @@ -25,6 +25,7 @@ require { type nagios_openshift_plugin_t; type nagios_openshift_plugin_exec_t; type httpd_t; type system_mail_t; role staff_r; + attribute unreserved_port_type; } type icinga2_t; @@ -64,6 +65,8 @@ type icinga2_tmp_t; files_tmp_file(icinga2_tmp_t) type icinga2_port_t; +# There is no interface for unreserved_port_type +typeattribute icinga2_port_t unreserved_port_type; corenet_port(icinga2_port_t) ########################################