From 241e1f943756d37ccd726a6d37a6776ee9b9d43c Mon Sep 17 00:00:00 2001 From: Yonas Habteab Date: Mon, 5 May 2025 11:17:35 +0200 Subject: [PATCH] Fix broken SELinux policy on Fedora `>=41` systems `sbindir` can be both `/usr/sbin` or `/usr/bin` depending on the used OS hence we need to make sure that this pattern matches on both paths. --- tools/selinux/icinga2.fc | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/tools/selinux/icinga2.fc b/tools/selinux/icinga2.fc index 325728d31..1d74e3e6f 100644 --- a/tools/selinux/icinga2.fc +++ b/tools/selinux/icinga2.fc @@ -6,7 +6,8 @@ /etc/icinga2/scripts(/.*)? -- gen_context(system_u:object_r:nagios_notification_plugin_exec_t,s0) -/usr/sbin/icinga2 -- gen_context(system_u:object_r:icinga2_exec_t,s0) +/usr/s?bin/icinga2 -- gen_context(system_u:object_r:icinga2_exec_t,s0) + /usr/lib/icinga2/sbin/icinga2 -- gen_context(system_u:object_r:icinga2_exec_t,s0) /usr/lib/icinga2/safe-reload -- gen_context(system_u:object_r:icinga2_exec_t,s0)