tyler.durden
/
icinga2
mirror of https://github.com/Icinga/icinga2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

SELinux: add unreserved_port_type attribute to icinga2_port_t 

Fixes #7029

(cherry picked from commit 726be2fec2)
This commit is contained in:
Dirk Goetz 2019-03-18 19:43:47 +01:00 committed by Michael Friedrich
parent 29e8961cda
commit 221215f4cd
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
tools/selinux/icinga2.te
View File

@ -1,4 +1,4 @@
policy_module(icinga2, 0.1.7) policy_module(icinga2, 0.1.8)
######################################## ########################################
# #
@ -25,6 +25,7 @@ require {
type nagios_openshift_plugin_t; type nagios_openshift_plugin_exec_t; type nagios_openshift_plugin_t; type nagios_openshift_plugin_exec_t;
type httpd_t; type system_mail_t; type httpd_t; type system_mail_t;
role staff_r; role staff_r;
attribute unreserved_port_type;
} }
type icinga2_t; type icinga2_t;
@ -64,6 +65,8 @@ type icinga2_tmp_t;
files_tmp_file(icinga2_tmp_t) files_tmp_file(icinga2_tmp_t)
type icinga2_port_t; type icinga2_port_t;
# There is no interface for unreserved_port_type
typeattribute icinga2_port_t unreserved_port_type;
corenet_port(icinga2_port_t) corenet_port(icinga2_port_t)
######################################## ########################################