mirror of
https://git.lapiole.org/dani/ansible-roles.git
synced 2025-07-26 15:55:56 +02:00
Update to 2021-12-01 19:13
This commit is contained in:
20
roles/zabbix_proxy/files/zabbix_proxy.te
Normal file
20
roles/zabbix_proxy/files/zabbix_proxy.te
Normal file
@@ -0,0 +1,20 @@
|
||||
module zabbix_proxy 1.1;
|
||||
|
||||
require {
|
||||
type zabbix_var_run_t;
|
||||
type zabbix_var_lib_t;
|
||||
type zabbix_t;
|
||||
type ping_t;
|
||||
class sock_file { create unlink };
|
||||
class unix_stream_socket connectto;
|
||||
class file { getattr read };
|
||||
class capability dac_override;
|
||||
}
|
||||
|
||||
#============= ping_t ==============
|
||||
allow ping_t zabbix_var_lib_t:file { getattr read };
|
||||
|
||||
#============= zabbix_t ==============
|
||||
allow zabbix_t self:unix_stream_socket connectto;
|
||||
allow zabbix_t zabbix_var_run_t:sock_file { create unlink };
|
||||
allow zabbix_t self:capability dac_override;
|
Reference in New Issue
Block a user