diff --git a/zabbix-proxy.te b/zabbix-proxy.te index f369bc1..bfb4ae2 100644 --- a/zabbix-proxy.te +++ b/zabbix-proxy.te @@ -1,4 +1,4 @@ -module zabbix-proxy 1.2; +module zabbix-proxy 1.3; require { type var_lib_t; @@ -7,6 +7,7 @@ require { type unlabeled_t; type zabbix_t; type zabbix_var_run_t; + type zabbix_var_lib_t; class file { read getattr }; class sem { unix_read unix_write associate destroy }; class shm { unix_read unix_write associate destroy }; @@ -19,6 +20,7 @@ require { #============= ping_t ============== allow ping_t var_lib_t:file { read getattr }; +allow ping_t zabbix_var_lib_t:file { read getattr }; allow initrc_t unlabeled_t:sem { unix_read unix_write associate destroy }; allow initrc_t unlabeled_t:shm { unix_read unix_write associate destroy }; allow unlabeled_t self:tcp_socket { create getattr accept shutdown read };