SELinux: Allows icinga2_t to send sigkill to all domains it transitions to

Fixes #5916

diff --git a/tools/selinux/icinga2.if b/tools/selinux/icinga2.if
index f54ad4fe375f90a85f0a5b7b45682ef420c4a80a..15fb034781273740b372c4b27d47cc0178c673b8 100644 (file)
--- a/tools/selinux/icinga2.if
+++ b/tools/selinux/icinga2.if
@@ -364,6 +364,7 @@ interface(`icinga2_execstrans',`
        ')
 
        domtrans_pattern(icinga2_t, $1, $2)
+        allow icinga2_t $2:process sigkill;
 ')
 
 ######################################

diff --git a/tools/selinux/icinga2.te b/tools/selinux/icinga2.te
index 1db47d3f671b87501c5fe2340d8464f4f5dd7345..da6e8b884815146e92c25632747e8b78d256254a 100644 (file)
--- a/tools/selinux/icinga2.te
+++ b/tools/selinux/icinga2.te
@@ -1,4 +1,4 @@
-policy_module(icinga2, 0.1.4)
+policy_module(icinga2, 0.1.5)
 
 ########################################
 #