SELinux: Add InfluxDB as example for services requiring `icinga2_can_connect_all`.

Fixes #5915

diff --git a/doc/14-features.md b/doc/14-features.md
index 215400b8f9b33e95862bc754ee9a201568dbd420..7c9f661de721e44e7ae35c6a95e13d8320872c9d 100644 (file)
--- a/doc/14-features.md
+++ b/doc/14-features.md
@@ -333,6 +333,9 @@ predominantly affects Windows paths e.g. `C:\` becomes `C:_`.
 
 The database is assumed to exist so this object will make no attempt to create it currently.
 
+If [SELinux](22-selinux.md#selinux) is enabled, it will not allow access for Icinga 2 to InfluxDB until the [boolean](22-selinux.md#booleans)
+`icinga2_can_connect_all` is set to true as InfluxDB is not providing its own policy.
+
 More configuration details can be found [here](09-object-types.md#objecttype-influxdbwriter).
 
 #### Instance Tagging <a id="influxdb-writer-instance-tags"></a>

diff --git a/doc/22-selinux.md b/doc/22-selinux.md
index 20a0cfff4a42b2504535b8d24736fe2b39561d0e..0e442ecf3892bd437a3da1b5317ec53bd36cf4e4 100644 (file)
--- a/doc/22-selinux.md
+++ b/doc/22-selinux.md
@@ -104,15 +104,15 @@ SELinux is based on the least level of access required for a service to run. Usi
 
 **icinga2_can_connect_all** 
 
-Having this boolean enabled allows icinga2 to connect to all ports. This can be necessary if you use features which connect to unconfined services.
+Having this boolean enabled allows icinga2 to connect to all ports. This can be necessary if you use features which connect to unconfined services, for example the [influxdb writer](14-features.md#influxdb-writer).
 
 **httpd_can_write_icinga2_command** 
 
-Having this boolean enabled allows httpd to write to the command pipe of icinga2. This is enabled by default, if not needed you can disable it for more security.
+To allow httpd to write to the command pipe of icinga2 this boolean has to be enabled. This is enabled by default, if not needed you can disable it for more security.
 
 **httpd_can_connect_icinga2_api** 
 
-Having this boolean enabled allows httpd to connect to the API of icinga2 (Ports labeled icinga2_port_t). This is enabled by default, if not needed you can disable it for more security.
+Enabling this boolean allows httpd to connect to the API of icinga2 (Ports labeled `icinga2_port_t`). This is enabled by default, if not needed you can disable it for more security.
 
 ### Configuration Examples <a id="selinux-policy-examples"></a>