[icinga-checkins] icinga.org: icinga-core/rbartels/cgi-current: allow nagios-plugins to write icinga tmp files

git at icinga.org git at icinga.org
Mon Mar 7 21:58:11 CET 2011


Module: icinga-core
Branch: rbartels/cgi-current
Commit: 4142f2880b2ee30419a87c51bca94717efe0e0c8
URL:    https://git.icinga.org/?p=icinga-core.git;a=commit;h=4142f2880b2ee30419a87c51bca94717efe0e0c8

Author: Christoph Maser <cmr at financial.com>
Date:   Tue Feb 15 13:17:27 2011 +0100

allow nagios-plugins to write icinga tmp files

---

 selinux/icinga.if |    2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)

diff --git a/selinux/icinga.if b/selinux/icinga.if
index 093092c..d5db0a3 100644
--- a/selinux/icinga.if
+++ b/selinux/icinga.if
@@ -38,6 +38,8 @@ template(`icinga_plugin_template',`
 	allow icinga_t icinga_$1_plugin_t:process signal_perms;
 	allow icinga_t nagios_$1_plugin_t:process signal_perms;
 
+        allow nagios_$1_plugin_t icinga_tmp_t:file { read write };
+
 	# cjp: leaked file descriptor
 	dontaudit icinga_$1_plugin_t nrpe_t:tcp_socket { read write };
 	dontaudit nagios_$1_plugin_t nrpe_t:tcp_socket { read write };





More information about the icinga-checkins mailing list