diff --git a/tools/selinux/icinga2.if b/tools/selinux/icinga2.if index ef1df784f..3c1e4635a 100644 --- a/tools/selinux/icinga2.if +++ b/tools/selinux/icinga2.if @@ -242,6 +242,24 @@ interface(`icinga2_manage_lib_dirs',` manage_dirs_pattern($1, icinga2_var_lib_t, icinga2_var_lib_t) ') +######################################## +## +## Manage icinga2 spool files. +## +## +## +## Domain allowed access. +## +## +# +interface(`icinga2_manage_spool_files',` + gen_require(` + type icinga2_spool_t; + ') + + files_search_var_lib($1) + manage_files_pattern($1, icinga2_spool_t, icinga2_spool_t) +') ######################################## ## diff --git a/tools/selinux/icinga2.te b/tools/selinux/icinga2.te index 7e5a4eb25..4b9126344 100644 --- a/tools/selinux/icinga2.te +++ b/tools/selinux/icinga2.te @@ -1,4 +1,4 @@ -policy_module(icinga2, 0.1.2) +policy_module(icinga2, 0.1.3) ######################################## #