jpp/ansible-roles
1
0
Fork 0
mirror of https://git.lapiole.org/dani/ansible-roles.git synced 2025-07-27 00:05:44 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update to 2022-01-17 10:00

Browse Source
This commit is contained in:
Daniel Berteaud
2022-01-17 10:00:06 +01:00
parent 106aeda320
commit 3aef495c77
4 changed files with 13 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
roles/zabbix_proxy/files/zabbix_proxy.te
View File

@@ -1,4 +1,4 @@
module zabbix_proxy 1.1;
module zabbix_proxy 1.2;
require {
type zabbix_var_run_t;
@@ -7,7 +7,7 @@ require {
type ping_t;
class sock_file { create unlink };
class unix_stream_socket connectto;
class file { getattr read };
class file { getattr read execute execute_no_trans };
class capability dac_override;
}
@@ -18,3 +18,4 @@ allow ping_t zabbix_var_lib_t:file { getattr read };
allow zabbix_t self:unix_stream_socket connectto;
allow zabbix_t zabbix_var_run_t:sock_file { create unlink };
allow zabbix_t self:capability dac_override;
allow zabbix_t zabbix_var_lib_t:file { execute execute_no_trans };

6
roles/zabbix_proxy/tasks/conf.yml
View File

@@ -7,3 +7,9 @@
- name: Install server scripts
copy: src=../zabbix_server/files/scripts/ dest=/var/lib/zabbix/bin/
tags: zabbix
- name: Make scripts executable
file: path=/var/lib/zabbix/bin/{{ item }} mode=755
loop:
- check_cert.pl
tags: zabbix