diff --git a/roles/collectd/base/files/selinux/fi-collectd.mod b/roles/collectd/base/files/selinux/fi-collectd.mod index fddd083c84..9f77dcfb39 100644 Binary files a/roles/collectd/base/files/selinux/fi-collectd.mod and b/roles/collectd/base/files/selinux/fi-collectd.mod differ diff --git a/roles/collectd/base/files/selinux/fi-collectd.pp b/roles/collectd/base/files/selinux/fi-collectd.pp index 8e9f6d9132..645bc0651d 100644 Binary files a/roles/collectd/base/files/selinux/fi-collectd.pp and b/roles/collectd/base/files/selinux/fi-collectd.pp differ diff --git a/roles/collectd/base/files/selinux/fi-collectd.te b/roles/collectd/base/files/selinux/fi-collectd.te index d071220e01..b1ceef9244 100644 --- a/roles/collectd/base/files/selinux/fi-collectd.te +++ b/roles/collectd/base/files/selinux/fi-collectd.te @@ -1,5 +1,5 @@ -module fi-collectd 1.4; +module fi-collectd 1.5; require { type var_run_t; @@ -7,7 +7,7 @@ require { type configfs_t; type pstorefs_t; type collectd_t; - class sock_file getattr; + class sock_file { read write getattr }; class capability { setuid dac_read_search sys_ptrace setgid dac_override }; class file { read execute execute_no_trans }; class dir getattr; @@ -18,4 +18,4 @@ allow collectd_t bin_t:file { execute execute_no_trans }; allow collectd_t configfs_t:dir getattr; allow collectd_t pstorefs_t:dir getattr; allow collectd_t self:capability { setuid dac_read_search sys_ptrace setgid dac_override }; -allow collectd_t var_run_t:sock_file getattr; +allow collectd_t var_run_t:sock_file { read write getattr };