From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Wed, 24 Aug 2011 09:21:39 -0400 Subject: [refpolicy] [PATCH 1/1] Fix zabbix_agentd context In-Reply-To: <20110823112456.GA6025@siphos.be> References: <20110823112456.GA6025@siphos.be> Message-ID: <4E54FAE3.40009@tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 08/23/11 07:24, Sven Vermeulen wrote: > The zabbix_agentd context was wrongfully set to the domain type instead of > the _exec_t type. > > Signed-off-by: Sven Vermeulen > --- > policy/modules/services/zabbix.fc | 2 +- > 1 files changed, 1 insertions(+), 1 deletions(-) > > diff --git a/policy/modules/services/zabbix.fc b/policy/modules/services/zabbix.fc > index 664cd7a..aa5a521 100644 > --- a/policy/modules/services/zabbix.fc > +++ b/policy/modules/services/zabbix.fc > @@ -2,7 +2,7 @@ > /etc/rc\.d/init\.d/zabbix-agentd -- gen_context(system_u:object_r:zabbix_agent_initrc_exec_t,s0) > > /usr/(s)?bin/zabbix_server -- gen_context(system_u:object_r:zabbix_exec_t,s0) > -/usr/(s)?bin/zabbix_agentd -- gen_context(system_u:object_r:zabbix_agent_t,s0) > +/usr/(s)?bin/zabbix_agentd -- gen_context(system_u:object_r:zabbix_agent_exec_t,s0) > > /var/log/zabbix(/.*)? gen_context(system_u:object_r:zabbix_log_t,s0) Merged. -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com