Re: policy patches

[Russell Coker <russell@coker.com.au>]

[-- Attachment #1: Type: text/plain, Size: 866 bytes --]

On Thu, 30 Sep 2004 03:45, Thomas Bleher <bleher@informatik.uni-muenchen.de> 
wrote:
> > +ifdef(`unlimitedUsers', `
> > +role staff_r types rpm_t;
> > +domain_auto_trans(staff_t, rpm_exec_t, rpm_t)
> > +')
>
> AFAIK unlimitedUsers was removed recently, so this snippet makes no
> sense anymore.

Thanks, I've removed that from my tree.

> On Debian, it's
> /usr/sbin/nagios                --      system_u:object_r:nagios_exec_t
> and
> /usr/lib/cgi-bin/nagios         --      system_u:object_r:nagios_cgi_exec_t
>
> These should be added also.

Thanks for that.  I've attached a new nagios.fc with that change.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page

[-- Attachment #2: nagios.fc --]
[-- Type: text/plain, Size: 675 bytes --]

# nagios - network monitoring server
/var/log/netsaint(/.*)?			system_u:object_r:nagios_log_t
/usr/lib(64)?/netsaint/plugins(/.*)?		system_u:object_r:bin_t
/usr/lib(64)?/cgi-bin/netsaint/.+	--	system_u:object_r:nagios_cgi_exec_t
# nagios
ifdef(`distro_debian', `
/usr/sbin/nagios		--	system_u:object_r:nagios_exec_t
/usr/lib/cgi-bin/nagios/.+	--	system_u:object_r:nagios_cgi_exec_t
', `
/usr/bin/nagios			--	system_u:object_r:nagios_exec_t
/usr/lib(64)?/nagios/cgi/.+	--	system_u:object_r:nagios_cgi_exec_t
')
/etc/nagios(/.*)?			system_u:object_r:nagios_etc_t
/var/log/nagios(/.*)?			system_u:object_r:nagios_log_t
/usr/lib(64)?/nagios/plugins(/.*)?	system_u:object_r:bin_t