From: dwalsh@redhat.com (Daniel J Walsh)
Date: Tue, 14 Oct 2008 16:27:21 -0400
Subject: [refpolicy] services_munin.patch
Message-ID: <48F500A9.7060509@redhat.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F10/services_munin.patch

Add initrc support

fix labeling on /var/log

Add _admin interface

Needs chown dav_override sys_rawio capabilities

Uses fifo files

Handle log files


Read kernel systctls and network state

Connect and bind to munin ports

dontaudit read all processes
execs ifconfig
Domtrans to ping

Calls getpw so needs auth_use_nsswith

Lists spool

Communicates with fstools and mysql  Reads mta logs and sends mail

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkj1AKkACgkQrlYvE4MpobM7VACdGySOBTKcxD1kWqJzJ7WQx1ej
q6YAnAopj3EONgfJMLDxGUlFWtYAnKAY
=/uVO
-----END PGP SIGNATURE-----