From 45ad0573f34e4ce99e73ee0e33701267da49dc63 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Aur=C3=A9lien=20Bompard?= <aurelien@bompard.org>
Date: Fri, 26 May 2023 14:54:32 +0200
Subject: [PATCH] Collectd: add one more selinux permission
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
---
 .../base/files/selinux/fi-collectd.mod        | Bin 4085 -> 4097 bytes
 .../base/files/selinux/fi-collectd.pp         | Bin 4101 -> 4113 bytes
 .../base/files/selinux/fi-collectd.te         |   6 +++---
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/roles/collectd/base/files/selinux/fi-collectd.mod b/roles/collectd/base/files/selinux/fi-collectd.mod
index 5592941a2cba72fea84851ff327f555e1ce9fce4..596ce3bdf579ae1ba866f9f8210b5cc8ad33ba61 100644
GIT binary patch
delta 79
zcmew=->5LbnbC0aK_-!n5v)v{ObiSRAj~jXmQRw01<Fgx%uCr^&!o!9$UHfaRd{j(
cx4`5FY&?sva5GMh;o+J5h9_XN0q;>J0Iwnv`2YX_

delta 100
zcmZov_$oianaRLmaw4nn<O#ei8)F!mlo%Np7(f^V@={B3GV`+I(^K<Oi!zhri}RDS
zQ%g2?GpTYiGH%|;t<N}l1`p5V08WlcydIMccz7m1U}c#c!0Rx%fR$zQ1l~d>09w@?
A3jhEB

diff --git a/roles/collectd/base/files/selinux/fi-collectd.pp b/roles/collectd/base/files/selinux/fi-collectd.pp
index cc266245e4517f9da9dbed63cf1a47c3142c5887..c1fbadb19929533778e8db6d70c150b757391af2 100644
GIT binary patch
delta 79
zcmZown5Zxzn9*?ZMJADr8LUj4ObiSRAj~jXmrs(11<Fgx%uCta&!o!9$UHfbRe16Q
cZh^@k*mxE{;bxqi!^1QA4^O~m2i~Jh0INU~S^xk5

delta 101
zcmbQJ(5f&Yn90Clav`hm<ORGe8*><$lo%Np7(f^V@={B3GV`+I(^K<Oi!zhri}RDS
zQ%g3_W>V#3WZZm^Tc2_A3Lc)x37j001$aFsJMi#K{=mvIIf2(<asw;N<^{ZkOaO2Y
B9E|_~

diff --git a/roles/collectd/base/files/selinux/fi-collectd.te b/roles/collectd/base/files/selinux/fi-collectd.te
index 82c1f13a11..94846dc864 100644
--- a/roles/collectd/base/files/selinux/fi-collectd.te
+++ b/roles/collectd/base/files/selinux/fi-collectd.te
@@ -1,4 +1,4 @@
-module fi-collectd 1.11.0;
+module fi-collectd 1.11.1;
 
 require {
     type shell_exec_t;
@@ -22,7 +22,7 @@ require {
     class lnk_file read;
     class sock_file { read write getattr };
     class unix_stream_socket connectto;
-    class netlink_generic_socket create;
+    class netlink_generic_socket { create bind };
 }
 
 #============= collectd_t ==============
@@ -41,4 +41,4 @@ allow collectd_t var_run_t:sock_file { read write getattr };
 allow collectd_t anon_inodefs_t:file { write read };
 allow collectd_t initrc_t:unix_stream_socket connectto;
 allow collectd_t proc_net_t:lnk_file read;
-allow collectd_t self:netlink_generic_socket create;
+allow collectd_t self:netlink_generic_socket { create bind };