From 58ee386ee393866c0226da525719e3ea0097dc96 Mon Sep 17 00:00:00 2001 From: Daniel Berteaud Date: Tue, 22 May 2018 12:05:55 +0200 Subject: [PATCH] Update zabbix-proxy SELinux policy for EL 7.5 --- zabbix-proxy.te | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/zabbix-proxy.te b/zabbix-proxy.te index f369bc1..bfb4ae2 100644 --- a/zabbix-proxy.te +++ b/zabbix-proxy.te @@ -1,4 +1,4 @@ -module zabbix-proxy 1.2; +module zabbix-proxy 1.3; require { type var_lib_t; @@ -7,6 +7,7 @@ require { type unlabeled_t; type zabbix_t; type zabbix_var_run_t; + type zabbix_var_lib_t; class file { read getattr }; class sem { unix_read unix_write associate destroy }; class shm { unix_read unix_write associate destroy }; @@ -19,6 +20,7 @@ require { #============= ping_t ============== allow ping_t var_lib_t:file { read getattr }; +allow ping_t zabbix_var_lib_t:file { read getattr }; allow initrc_t unlabeled_t:sem { unix_read unix_write associate destroy }; allow initrc_t unlabeled_t:shm { unix_read unix_write associate destroy }; allow unlabeled_t self:tcp_socket { create getattr accept shutdown read };