Nagios' checkdisk plugin requires getattr on the mountpoint directories
PATCH 1/1 Nagios' checkdisk plugin requires getattr on the mountpoint directories
Without the getattr privilege on the mountpoint directories, the checkdisk plugin fails to capture the data unless nagios is reconfigured to directly read the device files themselves.
Signed-off-by Sven Vermeulen <[email protected]>
--- policy/modules/services/nagios.te | 1 + 1 files changed, 1 insertions(+), 0 deletions(-)
policy/modules/services/nagios.te +1 -0
@@ -310,6 +310,7 @@ optional_policy(` # needed by ioctl() allow nagios_checkdisk_plugin_t self:capability { sys_admin sys_rawio }; +files_getattr_all_mountpoints(nagios_checkdisk_plugin_t) files_read_etc_runtime_files(nagios_checkdisk_plugin_t) fs_getattr_all_fs(nagios_checkdisk_plugin_t)
Signature · 1 line
1.7.3.4
PATCH 1/1 Nagios' checkdisk plugin requires getattr on the mountpoint directories
Quoted 14 lines · Sven Vermeulen
Without the getattr privilege on the mountpoint directories, the checkdisk plugin fails to capture the data unless nagios is reconfigured to directly read the device files themselves.
Signed-off-by Sven Vermeulen <[email protected]>--- policy/modules/services/nagios.te | 1 + 1 files changed, 1 insertions(+), 0 deletions(-)policy/modules/services/nagios.te +0
-0
policy/modules/services/nagios.te optional_policy(` · line 316
Quoted 7 lines
policy/modules/services/nagios.te +1
-0@@ -310,6 +310,7 @@ optional_policy(` # needed by ioctl() allow nagios_checkdisk_plugin_t self:capability { sys_admin sys_rawio }; +files_getattr_all_mountpoints(nagios_checkdisk_plugin_t) files_read_etc_runtime_files(nagios_checkdisk_plugin_t) fs_getattr_all_fs(nagios_checkdisk_plugin_t)
Merged.
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com