Projects
Eulaceura:Factory
nagios
_service:obs_scm:nagios.if
Sign Up
Log In
Username
Password
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File _service:obs_scm:nagios.if of Package nagios
## <summary>Net Saint / NAGIOS - network monitoring server</summary> ######################################## ## <summary> ## Create a set of derived types for various ## nagios plugins, ## </summary> ## <param name="plugins_group_name"> ## <summary> ## The name to be used for deriving type names. ## </summary> ## </param> # template(`nagios_plugin_template',` gen_require(` attribute nagios_plugin_domain; type nagios_t, nrpe_t; ') type nagios_$1_plugin_t, nagios_plugin_domain; type nagios_$1_plugin_exec_t; application_domain(nagios_$1_plugin_t, nagios_$1_plugin_exec_t) role system_r types nagios_$1_plugin_t; domtrans_pattern(nrpe_t, nagios_$1_plugin_exec_t, nagios_$1_plugin_t) allow nagios_t nagios_$1_plugin_exec_t:file ioctl; # needed by command.cfg domtrans_pattern(nagios_t, nagios_$1_plugin_exec_t, nagios_$1_plugin_t) kernel_read_system_state(nagios_$1_plugin_t) ') ######################################## ## <summary> ## Execute the nagios unconfined plugins with ## a domain transition. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`nagios_domtrans_unconfined_plugins',` gen_require(` type nagios_unconfined_plugin_t; type nagios_unconfined_plugin_exec_t; ') domtrans_pattern($1, nagios_unconfined_plugin_exec_t, nagios_unconfined_plugin_t) ') ######################################## ## <summary> ## Do not audit attempts to read or write nagios ## unnamed pipes. ## </summary> ## <param name="domain"> ## <summary> ## Domain to not audit. ## </summary> ## </param> # interface(`nagios_dontaudit_rw_pipes',` gen_require(` type nagios_t; ') dontaudit $1 nagios_t:fifo_file rw_fifo_file_perms; ') ######################################## ## <summary> ## Allow the specified domain to read ## nagios configuration files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <rolecap/> # interface(`nagios_read_config',` gen_require(` type nagios_etc_t; ') allow $1 nagios_etc_t:dir list_dir_perms; allow $1 nagios_etc_t:file read_file_perms; files_search_etc($1) ') ###################################### ## <summary> ## Read nagios lib files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`nagios_read_lib',` gen_require(` type nagios_var_lib_t; ') files_search_var($1) list_dirs_pattern($1, nagios_var_lib_t, nagios_var_lib_t) read_files_pattern($1, nagios_var_lib_t, nagios_var_lib_t) ') ###################################### ## <summary> ## Read nagios logs. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`nagios_read_log',` gen_require(` type nagios_log_t; ') logging_search_logs($1) read_files_pattern($1, nagios_log_t, nagios_log_t) ') ######################################## ## <summary> ## Do not audit attempts to read or write nagios logs. ## </summary> ## <param name="domain"> ## <summary> ## Domain to not audit. ## </summary> ## </param> # interface(`nagios_dontaudit_rw_log',` gen_require(` type nagios_log_t; ') dontaudit $1 nagios_log_t:file rw_file_perms; ') ######################################## ## <summary> ## Search nagios spool directories. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`nagios_search_spool',` gen_require(` type nagios_spool_t; ') allow $1 nagios_spool_t:dir search_dir_perms; files_search_spool($1) ') ######################################## ## <summary> ## Append nagios spool files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`nagios_append_spool',` gen_require(` type nagios_spool_t; ') allow $1 nagios_spool_t:file append_file_perms; files_search_spool($1) ') ######################################## ## <summary> ## Allow the specified domain to read ## nagios temporary files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`nagios_read_tmp_files',` gen_require(` type nagios_tmp_t; ') allow $1 nagios_tmp_t:file read_file_perms; files_search_tmp($1) ') ######################################## ## <summary> ## Allow the specified domain to read ## nagios temporary files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`nagios_rw_inerited_tmp_files',` gen_require(` type nagios_tmp_t; ') allow $1 nagios_tmp_t:file rw_inherited_file_perms; files_search_tmp($1) ') ######################################## ## <summary> ## Execute the nagios NRPE with ## a domain transition. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed to transition. ## </summary> ## </param> # interface(`nagios_domtrans_nrpe',` gen_require(` type nrpe_t, nrpe_exec_t; ') domtrans_pattern($1, nrpe_exec_t, nrpe_t) ') ###################################### ## <summary> ## Do not audit attempts to write nrpe daemon unnamed pipes. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`nagios_dontaudit_write_pipes_nrpe',` gen_require(` type nrpe_t; ') dontaudit $1 nrpe_t:fifo_file write; ') ######################################## ## <summary> ## All of the rules required to administrate ## an nagios environment ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <param name="role"> ## <summary> ## The role to be allowed to manage the nagios domain. ## </summary> ## </param> ## <rolecap/> # interface(`nagios_admin',` gen_require(` type nagios_t, nrpe_t, nagios_initrc_exec_t; type nagios_tmp_t, nagios_log_t, nagios_var_run_t; type nagios_etc_t, nrpe_etc_t, nagios_spool_t; ') allow $1 nagios_t:process signal_perms; ps_process_pattern($1, nagios_t) tunable_policy(`deny_ptrace',`',` allow $1 nagios_t:process ptrace; ') init_labeled_script_domtrans($1, nagios_initrc_exec_t) domain_system_change_exemption($1) role_transition $2 nagios_initrc_exec_t system_r; allow $2 system_r; files_list_tmp($1) admin_pattern($1, nagios_tmp_t) logging_list_logs($1) admin_pattern($1, nagios_log_t) files_list_etc($1) admin_pattern($1, nagios_etc_t) files_list_spool($1) admin_pattern($1, nagios_spool_t) files_list_pids($1) admin_pattern($1, nagios_var_run_t) admin_pattern($1, nrpe_etc_t) ') ######################################## ## <summary> ## Send a null signal to nagios_unconfined_plugin. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`nagios_unconfined_signull',` gen_require(` type nagios_unconfined_plugin_t; ') allow $1 nagios_unconfined_plugin_t:process signull; ') ######################################## # # Nagios interface compatibility blocks # # The following definitions ensure compatibility with distribution policy # versions that do not contain given interfaces (epel, or older Fedora # releases). # Each block tests for existence of given interface and defines it if needed. # ######################################## ## <summary> ## Allow caller to signull sssd. ## Backport from RHEL8 ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # ifndef(`sssd_signull',` interface(`sssd_signull',` gen_require(` type sssd_t; ') allow $1 sssd_t:process signull; ') ')
Locations
Projects
Search
Status Monitor
Help
Open Build Service
OBS Manuals
API Documentation
OBS Portal
Reporting a Bug
Contact
Mailing List
Forums
Chat (IRC)
Twitter
Open Build Service (OBS)
is an
openSUSE project
.
浙ICP备2022010568号-2