SELinux: Add InfluxDB as example for services requiring `icinga2_can_connect_all`.

Fixes #5915

diff --git a/doc/14-features.md b/doc/14-features.md
index 06c9342ebd5b77f03c5d9e5f80c09c68cde33abb..513ad11f3d8b63c1c2b93b89636b60ade3264ff2 100644 (file)
--- a/doc/14-features.md
+++ b/doc/14-features.md
@@ -280,6 +280,9 @@ predominantly affects Windows paths e.g. `C:\` becomes `C:_`.
 
 The database is assumed to exist so this object will make no attempt to create it currently.
 
+If [SELinux](22-selinux.md#selinux) is enabled, it will not allow access for Icinga 2 to InfluxDB until the [boolean](22-selinux.md#booleans)
+`icinga2_can_connect_all` is set to true as InfluxDB is not providing its own policy.
+
 More configuration details can be found [here](09-object-types.md#objecttype-influxdbwriter).
 
 #### Instance Tagging <a id="influxdb-writer-instance-tags"></a>

diff --git a/doc/22-selinux.md b/doc/22-selinux.md
index 20a0cfff4a42b2504535b8d24736fe2b39561d0e..0e442ecf3892bd437a3da1b5317ec53bd36cf4e4 100644 (file)
--- a/doc/22-selinux.md
+++ b/doc/22-selinux.md
@@ -104,15 +104,15 @@ SELinux is based on the least level of access required for a service to run. Usi
 
 **icinga2_can_connect_all** 
 
-Having this boolean enabled allows icinga2 to connect to all ports. This can be necessary if you use features which connect to unconfined services.
+Having this boolean enabled allows icinga2 to connect to all ports. This can be necessary if you use features which connect to unconfined services, for example the [influxdb writer](14-features.md#influxdb-writer).
 
 **httpd_can_write_icinga2_command** 
 
-Having this boolean enabled allows httpd to write to the command pipe of icinga2. This is enabled by default, if not needed you can disable it for more security.
+To allow httpd to write to the command pipe of icinga2 this boolean has to be enabled. This is enabled by default, if not needed you can disable it for more security.
 
 **httpd_can_connect_icinga2_api** 
 
-Having this boolean enabled allows httpd to connect to the API of icinga2 (Ports labeled icinga2_port_t). This is enabled by default, if not needed you can disable it for more security.
+Enabling this boolean allows httpd to connect to the API of icinga2 (Ports labeled `icinga2_port_t`). This is enabled by default, if not needed you can disable it for more security.
 
 ### Configuration Examples <a id="selinux-policy-examples"></a>