The zabbix_agentd context was wrongfully set to the domain type instead of
the _exec_t type.
Signed-off-by: Sven Vermeulen <[email protected]>
---
policy/modules/services/zabbix.fc | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/policy/modules/services/zabbix.fc b/policy/modules/services/zabbix.fc
index 664cd7a..aa5a521 100644
--- a/policy/modules/services/zabbix.fc
+++ b/policy/modules/services/zabbix.fc
@@ -2,7 +2,7 @@
/etc/rc\.d/init\.d/zabbix-agentd -- gen_context(system_u:object_r:zabbix_agent_initrc_exec_t,s0)
/usr/(s)?bin/zabbix_server -- gen_context(system_u:object_r:zabbix_exec_t,s0)
-/usr/(s)?bin/zabbix_agentd -- gen_context(system_u:object_r:zabbix_agent_t,s0)
+/usr/(s)?bin/zabbix_agentd -- gen_context(system_u:object_r:zabbix_agent_exec_t,s0)
/var/log/zabbix(/.*)? gen_context(system_u:object_r:zabbix_log_t,s0)
--
1.7.3.4
On 08/23/11 07:24, Sven Vermeulen wrote:
> The zabbix_agentd context was wrongfully set to the domain type instead of
> the _exec_t type.
>
> Signed-off-by: Sven Vermeulen <[email protected]>
> ---
> policy/modules/services/zabbix.fc | 2 +-
> 1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/policy/modules/services/zabbix.fc b/policy/modules/services/zabbix.fc
> index 664cd7a..aa5a521 100644
> --- a/policy/modules/services/zabbix.fc
> +++ b/policy/modules/services/zabbix.fc
> @@ -2,7 +2,7 @@
> /etc/rc\.d/init\.d/zabbix-agentd -- gen_context(system_u:object_r:zabbix_agent_initrc_exec_t,s0)
>
> /usr/(s)?bin/zabbix_server -- gen_context(system_u:object_r:zabbix_exec_t,s0)
> -/usr/(s)?bin/zabbix_agentd -- gen_context(system_u:object_r:zabbix_agent_t,s0)
> +/usr/(s)?bin/zabbix_agentd -- gen_context(system_u:object_r:zabbix_agent_exec_t,s0)
>
> /var/log/zabbix(/.*)? gen_context(system_u:object_r:zabbix_log_t,s0)
Merged.
--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com