Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

This has to be the last one..

Browse source
This commit is contained in:
Ralph Bean 2014-07-18 20:00:58 +00:00
parent 8ef047dc5b
commit 28bd3996a7
3 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

BIN
roles/collectd/base/files/selinux/fi-collectd.mod
View file

Binary file not shown.

BIN
roles/collectd/base/files/selinux/fi-collectd.pp
View file

Binary file not shown.

6
roles/collectd/base/files/selinux/fi-collectd.te
View file

@ -1,5 +1,5 @@
module fi-collectd 1.2; module fi-collectd 1.3;
require { require {
type bin_t; type bin_t;
@ -7,12 +7,12 @@ require {
type pstorefs_t; type pstorefs_t;
type collectd_t; type collectd_t;
class capability { setuid dac_read_search sys_ptrace setgid dac_override }; class capability { setuid dac_read_search sys_ptrace setgid dac_override };
class file { read execute }; class file { read execute execute_no_trans };
class dir getattr; class dir getattr;
} }
#============= collectd_t ============== #============= collectd_t ==============
allow collectd_t bin_t:file execute; allow collectd_t bin_t:file { execute execute_no_trans };
allow collectd_t configfs_t:dir getattr; allow collectd_t configfs_t:dir getattr;
allow collectd_t pstorefs_t:dir getattr; allow collectd_t pstorefs_t:dir getattr;
allow collectd_t self:capability { setuid dac_read_search sys_ptrace setgid dac_override }; allow collectd_t self:capability { setuid dac_read_search sys_ptrace setgid dac_override };