From: Dirk Goetz <dirk.goetz@netways.de>
Date: Mon, 18 Mar 2019 18:43:47 +0000 (+0100)
Subject: SELinux: add unreserved_port_type attribute to icinga2_port_t
X-Git-Tag: v2.10.4~7
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=221215f4cda650571f991f2f538690acbba54ce9;p=icinga2

SELinux: add unreserved_port_type attribute to icinga2_port_t

Fixes #7029

(cherry picked from commit 726be2fec262f10b42649d1dad5099336e8610e9)
---

diff --git a/tools/selinux/icinga2.te b/tools/selinux/icinga2.te
index 1eea26a10..23632c3eb 100644
--- a/tools/selinux/icinga2.te
+++ b/tools/selinux/icinga2.te
@@ -1,4 +1,4 @@
-policy_module(icinga2, 0.1.7)
+policy_module(icinga2, 0.1.8)
 
 ########################################
 #
@@ -25,6 +25,7 @@ require {
 	type nagios_openshift_plugin_t; type nagios_openshift_plugin_exec_t;
 	type httpd_t; type system_mail_t;
 	role staff_r;
+	attribute unreserved_port_type;
 }
 
 type icinga2_t;
@@ -64,6 +65,8 @@ type icinga2_tmp_t;
 files_tmp_file(icinga2_tmp_t)
 
 type icinga2_port_t;
+# There is no interface for unreserved_port_type
+typeattribute icinga2_port_t unreserved_port_type;
 corenet_port(icinga2_port_t)
 
 ########################################