NUT UPS monitor (upsmon) - executes helper (upssched) and that executes via custom script the monitor again (upsmon) 

This seems not to be allowed ->  denied { execute_no_trans }


As an temp solution we installed a semodule with

allow nut_upsmon_t nut_upsmon_exec_t:file execute_no_trans;

Should this be included? 

Reproducible: Always

Steps to Reproduce:
1. Install nut-client 
2. Configure the client (nut-monitor) to use upssched 
3. grep upssch /etc/ups/upsmon.conf
   NOTIFYCMD /usr/sbin/upssched
4. Configure upssched to use the custom script (e.g. /usr/bin/upssched-cmd)
5. Add to the custom script "/usr/sbin/upsmon -c fsd" to force a shutdown 

Actual Results:  
type=AVC msg=audit(1690760021.301:222): avc:  denied  { execute_no_trans } for  pid=2267 comm="upssched-handle" path="/usr/sbin/upsmon" dev="dm-0" ino=27404 scontext=system_u:system_r:nut_upsmon_t:s0 tcontext=system_u:object_r:nut_upsmon_exec_t:s0 tclass=file permissive=1


Expected Results:  
upsmon should be able to exec "upsmon -c fsd" via upssched + script chain to shut the system down.

From the nut docs: 
"upsmon starts as root and forks an unprivileged process which does the actual
monitoring over the network. When a shutdown is necessary, a single
character is sent to the privileged process. It then calls the predefined
shutdown command. "

Therefore the "/usr/sbin/upsmon -c fsd" command (fsd = force shutdown)