Attachment 1483455 Details for Bug 1164245 – Munin patch for rhel 7.5 tmpreaper policy

[patch] Munin patch for rhel 7.5 tmpreaper policy

policy-contrib-tmpreaper.patch (text/plain), 1.59 KB, created by Tuomo Soini on 2018-09-15 07:53:47 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Tuomo Soini

Created: 2018-09-15 07:53:47 UTC

Size: 1.59 KB

patch

obsolete

># tmpwatch cleanup munin_var_lib_t
>type=AVC audit(1429150861.403:19): avc:  denied  { read } for  pid=9650 comm="tmpwatch" name="cgi-tmp" dev="sdb3" ino=91494 scontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:munin_var_lib_t:s0 tclass=dir
>type=AVC audit(1429150861.411:20): avc:  denied  { setattr } for  pid=9650 comm="tmpwatch" name="risa.bbbs.net" dev="sdb3" ino=92055 scontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:munin_var_lib_t:s0 tclass=dir
>type=AVC audit(1429150861.422:21): avc:  denied  { rmdir } for  pid=9650 comm="tmpwatch" name="bbbs.net" dev="sdb3" ino=92054 scontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:munin_var_lib_t:s0 tclass=dir
>
># tmpwatch used to clean up mock cache
>type=AVC msg=audit(1429143902.023:16326): avc:  denied  { read } for  pid=22634 comm="tmpwatch" name="/" dev="tmpfs" ino=16580 scontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mock_cache_t:s0 tclass=dir
>
>diff -up serefpolicy-contrib-3.13.1/tmpreaper.te.tmpreaper serefpolicy-contrib-3.13.1/tmpreaper.te
>--- serefpolicy-contrib-3.13.1/tmpreaper.te.tmpreaper	2018-04-10 11:55:08.073333048 +0300
>+++ serefpolicy-contrib-3.13.1/tmpreaper.te	2018-04-10 11:55:08.855209467 +0300
>@@ -138,6 +138,15 @@ optional_policy(`
> ')
> 
> optional_policy(`
>+	mock_manage_cache_dirs(tmpreaper_t)
>+	mock_manage_cache_files(tmpreaper_t)
>+')
>+
>+optional_policy(`
>+	munin_manage_var_lib_files(tmpreaper_t)
>+')
>+
>+optional_policy(`
> 	sandbox_list(tmpreaper_t)
> 	sandbox_delete_dirs(tmpreaper_t)
> 	sandbox_delete_files(tmpreaper_t)

Actions: View | Diff

Attachments on bug 1164245: 1483452 | 1483453 | 1483454 | 1483455