mirror of
https://git.lapiole.org/dani/ansible-roles.git
synced 2025-04-26 15:13:20 +02:00
24 lines
826 B
Plaintext
24 lines
826 B
Plaintext
module zabbix_server 1.4;
|
|
|
|
require {
|
|
type zabbix_var_run_t;
|
|
type zabbix_t;
|
|
type zabbix_var_lib_t;
|
|
type mysqld_db_t;
|
|
type httpd_t;
|
|
type unconfined_service_t;
|
|
class sock_file { create unlink write };
|
|
class unix_stream_socket connectto;
|
|
class file { execute execute_no_trans };
|
|
class capability dac_override;
|
|
}
|
|
|
|
#============= zabbix_t ==============
|
|
allow zabbix_t self:unix_stream_socket connectto;
|
|
allow zabbix_t self:capability dac_override;
|
|
allow zabbix_t zabbix_var_lib_t:file { execute execute_no_trans };
|
|
allow zabbix_t zabbix_var_run_t:sock_file { create unlink };
|
|
allow zabbix_t mysqld_db_t:sock_file write;
|
|
allow zabbix_t unconfined_service_t:unix_stream_socket connectto;
|
|
allow httpd_t unconfined_service_t:unix_stream_socket connectto;
|