SELinux: add unreserved_port_type attribute to icinga2_port_t

Fixes #7029

(cherry picked from commit 726be2fec262f10b42649d1dad5099336e8610e9)

diff --git a/tools/selinux/icinga2.te b/tools/selinux/icinga2.te
index 1eea26a10ea6f6bf325f1c629492f92bc5753c88..23632c3ebe73fa888c433f59f85cf86d5e62c728 100644 (file)
--- a/tools/selinux/icinga2.te
+++ b/tools/selinux/icinga2.te
@@ -1,4 +1,4 @@
-policy_module(icinga2, 0.1.7)
+policy_module(icinga2, 0.1.8)
 
 ########################################
 #
@@ -25,6 +25,7 @@ require {
        type nagios_openshift_plugin_t; type nagios_openshift_plugin_exec_t;
        type httpd_t; type system_mail_t;
        role staff_r;
+       attribute unreserved_port_type;
 }
 
 type icinga2_t;
@@ -64,6 +65,8 @@ type icinga2_tmp_t;
 files_tmp_file(icinga2_tmp_t)
 
 type icinga2_port_t;
+# There is no interface for unreserved_port_type
+typeattribute icinga2_port_t unreserved_port_type;
 corenet_port(icinga2_port_t)
 
 ########################################