2011-08-23 11:24:56

by sven.vermeulen

[permalink] [raw]
Subject: [refpolicy] [PATCH 1/1] Fix zabbix_agentd context

The zabbix_agentd context was wrongfully set to the domain type instead of
the _exec_t type.

Signed-off-by: Sven Vermeulen <[email protected]>
---
policy/modules/services/zabbix.fc | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/policy/modules/services/zabbix.fc b/policy/modules/services/zabbix.fc
index 664cd7a..aa5a521 100644
--- a/policy/modules/services/zabbix.fc
+++ b/policy/modules/services/zabbix.fc
@@ -2,7 +2,7 @@
/etc/rc\.d/init\.d/zabbix-agentd -- gen_context(system_u:object_r:zabbix_agent_initrc_exec_t,s0)

/usr/(s)?bin/zabbix_server -- gen_context(system_u:object_r:zabbix_exec_t,s0)
-/usr/(s)?bin/zabbix_agentd -- gen_context(system_u:object_r:zabbix_agent_t,s0)
+/usr/(s)?bin/zabbix_agentd -- gen_context(system_u:object_r:zabbix_agent_exec_t,s0)

/var/log/zabbix(/.*)? gen_context(system_u:object_r:zabbix_log_t,s0)

--
1.7.3.4


2011-08-24 13:21:39

by cpebenito

[permalink] [raw]
Subject: [refpolicy] [PATCH 1/1] Fix zabbix_agentd context

On 08/23/11 07:24, Sven Vermeulen wrote:
> The zabbix_agentd context was wrongfully set to the domain type instead of
> the _exec_t type.
>
> Signed-off-by: Sven Vermeulen <[email protected]>
> ---
> policy/modules/services/zabbix.fc | 2 +-
> 1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/policy/modules/services/zabbix.fc b/policy/modules/services/zabbix.fc
> index 664cd7a..aa5a521 100644
> --- a/policy/modules/services/zabbix.fc
> +++ b/policy/modules/services/zabbix.fc
> @@ -2,7 +2,7 @@
> /etc/rc\.d/init\.d/zabbix-agentd -- gen_context(system_u:object_r:zabbix_agent_initrc_exec_t,s0)
>
> /usr/(s)?bin/zabbix_server -- gen_context(system_u:object_r:zabbix_exec_t,s0)
> -/usr/(s)?bin/zabbix_agentd -- gen_context(system_u:object_r:zabbix_agent_t,s0)
> +/usr/(s)?bin/zabbix_agentd -- gen_context(system_u:object_r:zabbix_agent_exec_t,s0)
>
> /var/log/zabbix(/.*)? gen_context(system_u:object_r:zabbix_log_t,s0)

Merged.

--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com