Convert te, mod, pp, SELinux

Chack situation:
audit2allow -a | grep -v "===\|^$" | sed -e '/#!!!!/,+1d'
zabbix_agent_policy.te:
module zabbix_agent_policy 1.0;

require{
	type zabbix_agent_t;
	type var_log_t;
	class dir { add_name write };
	class file { create open read };
}

#============= zabbix_agent_t ==============
allow zabbix_agent_t var_log_t:dir { add_name write };
allow zabbix_agent_t var_log_t:file { create open read };
Create mod:
checkmodule -M -m -o zabbix_agent_policy.mod zabbix_agent_policy.te
Create pp:
semodule_package -o zabbix_agent_policy.pp -m zabbix_agent_policy.mod
Install policy:
semodule -i zabbix_agent_policy.pp

No comments: