RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

trunk: nagios update from dan

This commit is contained in:
Chris PeBenito 2007-06-21 17:23:19 +00:00
parent a90a256f64
commit 02f2c3e979
1 changed files with 7 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
policy/modules/services/nagios.te
View File

@ -1,5 +1,5 @@
policy_module(nagios,1.2.0)
policy_module(nagios,1.2.1)
########################################
#
@ -73,8 +73,10 @@ corenet_tcp_sendrecv_all_nodes(nagios_t)
corenet_udp_sendrecv_all_nodes(nagios_t)
corenet_tcp_sendrecv_all_ports(nagios_t)
corenet_udp_sendrecv_all_ports(nagios_t)
corenet_tcp_connect_all_ports(nagios_t)
dev_read_sysfs(nagios_t)
dev_read_urand(nagios_t)
domain_use_interactive_fds(nagios_t)
# for ps
@ -97,8 +99,6 @@ logging_send_syslog_msg(nagios_t)
miscfiles_read_localization(nagios_t)
sysnet_read_config(nagios_t)
userdom_dontaudit_use_unpriv_user_fds(nagios_t)
userdom_dontaudit_search_sysadm_home_dirs(nagios_t)
@ -111,17 +111,13 @@ ifdef(`targeted_policy',`
')
optional_policy(`
netutils_domtrans_ping(nagios_t)
netutils_signal_ping(nagios_t)
netutils_kill_ping(nagios_t)
# cjp: leaked file descriptors:
#dontaudit ping_t nagios_etc_t:file read;
#dontaudit ping_t nagios_log_t:fifo_file read;
auth_use_nsswitch(nagios_t)
')
optional_policy(`
nis_use_ypbind(nagios_t)
netutils_domtrans_ping(nagios_t)
netutils_signal_ping(nagios_t)
netutils_kill_ping(nagios_t)
')
optional_policy(`