From 00a07a86b0458b054d3ade5d140f5d6475158ee1 Mon Sep 17 00:00:00 2001
From: Dirk Goetz <dirk.goetz@netways.de>
Date: Mon, 15 Jan 2018 15:05:09 +0100
Subject: [PATCH] SELinux: Allows icinga2_t to send sigkill to all domains it
 transitions to

Fixes #5916
---
 tools/selinux/icinga2.if | 1 +
 tools/selinux/icinga2.te | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/tools/selinux/icinga2.if b/tools/selinux/icinga2.if
index f54ad4fe3..15fb03478 100644
--- a/tools/selinux/icinga2.if
+++ b/tools/selinux/icinga2.if
@@ -364,6 +364,7 @@ interface(`icinga2_execstrans',`
 	')
 
 	domtrans_pattern(icinga2_t, $1, $2)
+        allow icinga2_t $2:process sigkill;
 ')
 
 ######################################
diff --git a/tools/selinux/icinga2.te b/tools/selinux/icinga2.te
index 1db47d3f6..da6e8b884 100644
--- a/tools/selinux/icinga2.te
+++ b/tools/selinux/icinga2.te
@@ -1,4 +1,4 @@
-policy_module(icinga2, 0.1.4)
+policy_module(icinga2, 0.1.5)
 
 ########################################
 #