ansible/roles/collectd/fcomm-queue/files/selinux/fi-collectd-fcomm.te

17 lines
434 B
Text

module fi-collectd-fcomm 1.0;
require {
type bin_t;
type collectd_t;
type ldconfig_exec_t;
type shell_exec_t;
class file { read getattr open ioctl execute execute_no_trans };
class lnk_file { read };
}
allow collectd_t bin_t:file ioctl;
allow collectd_t bin_t:lnk_file read;
allow collectd_t ldconfig_exec_t:file { read execute open execute_no_trans };
allow collectd_t shell_exec_t:file { getattr execute_no_trans };