Chack situation:
audit2allow -a | grep -v "===\|^$" | sed -e '/#!!!!/,+1d'
zabbix_agent_policy.te:
module zabbix_agent_policy 1.0;
require{
type zabbix_agent_t;
type var_log_t;
class dir { add_name write };
class file { create open read };
}
#============= zabbix_agent_t ==============
allow zabbix_agent_t var_log_t:dir { add_name write };
allow zabbix_agent_t var_log_t:file { create open read };
Create mod:
checkmodule -M -m -o zabbix_agent_policy.mod zabbix_agent_policy.te
Create pp:
semodule_package -o zabbix_agent_policy.pp -m zabbix_agent_policy.mod
Install policy:
semodule -i zabbix_agent_policy.pp
No comments:
Post a Comment