[node-patches] Change in ovirt-node[master]: selinux: Policy update for collectd

[fabiand at fedoraproject.org]

Fabian Deutsch has uploaded a new change for review.

Change subject: selinux: Policy update for collectd
......................................................................

selinux: Policy update for collectd

collectd needs acccess to passwd and libvirt related stuff.

Change-Id: I369a03867c163242fd0db7cc0f53136ff9fb62a9
Signed-off-by: Fabian Deutsch <fabiand at fedoraproject.org>
---
M recipe/ovirt17-post.ks
1 file changed, 4 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.ovirt.org:29418/ovirt-node refs/changes/23/13923/1

diff --git a/recipe/ovirt17-post.ks b/recipe/ovirt17-post.ks
index 05a8c93..5369ded 100644
--- a/recipe/ovirt17-post.ks
+++ b/recipe/ovirt17-post.ks
@@ -112,6 +112,10 @@
 #allow passwd_t user_tmp_t:file write;
 # Unknown on F17 brctl_t:
 #allow brctl_t net_conf_t:file read;
+
+#============= collectd_t ==============
+allow collectd_t passwd_file_t:file read;
+allow collectd_t virtd_exec_t:file getattr;
 # Suppose because of collectd libvirt plugin
 allow collectd_t virt_etc_t:file read;
 


--
To view, visit http://gerrit.ovirt.org/13923
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I369a03867c163242fd0db7cc0f53136ff9fb62a9
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-node
Gerrit-Branch: master
Gerrit-Owner: Fabian Deutsch <fabiand at fedoraproject.org>