From mboxrd@z Thu Jan  1 00:00:00 1970
From: dwalsh@redhat.com (Daniel J Walsh)
Date: Mon, 25 Aug 2008 13:44:27 -0400
Subject: [refpolicy] Updated munin support
In-Reply-To: <1219329708.16398.68.camel@gorn.columbia.tresys.com>
References: <20080804123456.679565839@hardeman.nu>	<20080804123735.158269348@hardeman.nu>
	<1219329708.16398.68.camel@gorn.columbia.tresys.com>
Message-ID: <48B2EF7B.2040500@redhat.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com


http://people.fedoraproject.org/~dwalsh/SELinux/Policy/services_munin.patch

Add munin port definition

Add http scripts

munin needs chown dav_override and sys_rawio capabilities

Uses fifo_file to communicate with itself.

Execs itself.

Manages its only log files in a log directory

Fixes for file context

Reads all sysctls and network state

Can exec shell

communicates with the munin port

Uses getpw

execs ps

Communicates with mysql