Attachment 923966 Details for Bug 1126538 – content of .te file, which was created with audit2allow fed with the log messages

content of .te file, which was created with audit2allow fed with the log messages

file_1126538.txt (text/plain), 1.36 KB, created by Gabriele Pohl on 2014-08-04 17:01:57 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Gabriele Pohl

Created: 2014-08-04 17:01:57 UTC

Size: 1.36 KB

patch

obsolete

>module munin-yum_pol 1.0;
>
>require {
>	type devlog_t;
>	type boot_t;
>	type rpm_script_tmp_t;
>	type syslogd_t;
>	type rpm_exec_t;
>	type munin_system_plugin_t;
>	type http_port_t;
>	type rpm_var_lib_t;
>	class sock_file { write getattr };
>	class tcp_socket name_connect;
>	class unix_dgram_socket { create connect sendto };
>	class file { rename ioctl setattr getattr read create unlink open execute execute_no_trans };
>	class dir { read write add_name remove_name };
>}
>
>#============= munin_system_plugin_t ==============
>allow munin_system_plugin_t boot_t:dir read;
>allow munin_system_plugin_t devlog_t:sock_file { write getattr };
>
>#!!!! This avc can be allowed using the boolean 'allow_ypbind'
>allow munin_system_plugin_t http_port_t:tcp_socket name_connect;
>allow munin_system_plugin_t rpm_exec_t:file { ioctl execute read open getattr execute_no_trans };
>#!!!! The source type 'munin_system_plugin_t' can write to a 'dir' of the following types:
># munin_system_plugin_tmp_t, tmp_t, munin_plugin_state_t
>
>allow munin_system_plugin_t rpm_script_tmp_t:dir { write remove_name read add_name };
>allow munin_system_plugin_t rpm_script_tmp_t:file { rename create unlink setattr };
>allow munin_system_plugin_t rpm_var_lib_t:file open;
>allow munin_system_plugin_t self:unix_dgram_socket { create connect };
>allow munin_system_plugin_t syslogd_t:unix_dgram_socket sendto;

Actions: View

Attachments on bug 1126538: 923966