diff --git a/roles/nagios_server/files/selinux/Makefile b/roles/nagios_server/files/selinux/Makefile new file mode 100644 index 0000000000..9f2c724098 --- /dev/null +++ b/roles/nagios_server/files/selinux/Makefile @@ -0,0 +1,4 @@ +module: + checkmodule -Mmo nagios_hostname.mod nagios_hostname.te + semodule_package -o nagios_hostname.pp -m nagios_hostname.mod + rm nagios_hostname.mod diff --git a/roles/nagios_server/files/selinux/nagios_hostname.pp b/roles/nagios_server/files/selinux/nagios_hostname.pp new file mode 100644 index 0000000000..4064cf79d8 Binary files /dev/null and b/roles/nagios_server/files/selinux/nagios_hostname.pp differ diff --git a/roles/nagios_server/files/selinux/nagios_hostname.te b/roles/nagios_server/files/selinux/nagios_hostname.te new file mode 100644 index 0000000000..a8029f453a --- /dev/null +++ b/roles/nagios_server/files/selinux/nagios_hostname.te @@ -0,0 +1,11 @@ + +module nagios_hostname 1.0; + +require { + type nagios_t; + type hostname_exec_t; + class file { read getattr open execute execute_no_trans }; +} + +#============= nagios_t ============== +allow nagios_t hostname_exec_t:file { read getattr open execute execute_no_trans };