[icinga-checkins] icinga.org: icinga-core/rbartels/cgi-current: allow socket access for ido2db

git at icinga.org git at icinga.org
Mon Mar 7 21:58:11 CET 2011


Module: icinga-core
Branch: rbartels/cgi-current
Commit: 6d8e12d81e129e18b54410c2c7c764c9bf318f9f
URL:    https://git.icinga.org/?p=icinga-core.git;a=commit;h=6d8e12d81e129e18b54410c2c7c764c9bf318f9f

Author: Christoph Maser <cmr at financial.com>
Date:   Tue Feb 15 13:06:18 2011 +0100

allow socket access for ido2db

---

 selinux/icinga.te |    4 ++++
 1 files changed, 4 insertions(+), 0 deletions(-)

diff --git a/selinux/icinga.te b/selinux/icinga.te
index a90947a..258a15e 100644
--- a/selinux/icinga.te
+++ b/selinux/icinga.te
@@ -53,6 +53,10 @@ read_files_pattern(icinga_t, icinga_etc_t, icinga_etc_t)
 read_lnk_files_pattern(icinga_t, icinga_etc_t, icinga_etc_t)
 allow icinga_t icinga_etc_t:dir list_dir_perms;
 
+# Allow ido socket
+allow icinga_t icinga_log_t:sock_file write;
+allow icinga_t initrc_t:unix_stream_socket connectto;
+
 manage_files_pattern(icinga_t, icinga_log_t, icinga_log_t)
 manage_fifo_files_pattern(icinga_t, icinga_log_t, icinga_log_t)
 logging_log_filetrans(icinga_t, icinga_log_t, { file dir })





More information about the icinga-checkins mailing list