Allow munin services plugins to use NSCD services

[people/stevee/selinux-policy.git] / policy / modules / services / munin.te

diff --git a/policy/modules/services/munin.te b/policy/modules/services/munin.te
index 9850f4d7510ec47ed134e41dbd08439a710df422..171ebec90db6803dcfd79c648e8b785474a2bc64 100644 (file)
--- a/policy/modules/services/munin.te
+++ b/policy/modules/services/munin.te
@@ -233,10 +233,16 @@ dev_read_urand(mail_munin_plugin_t)
 
 logging_read_generic_logs(mail_munin_plugin_t)
 
-mta_read_config(mail_munin_plugin_t)
-mta_send_mail(mail_munin_plugin_t)
-mta_list_queue(mail_munin_plugin_t)
-mta_read_queue(mail_munin_plugin_t)
+optional_policy(`
+       mta_read_config(mail_munin_plugin_t)
+       mta_send_mail(mail_munin_plugin_t)
+       mta_list_queue(mail_munin_plugin_t)
+       mta_read_queue(mail_munin_plugin_t)
+')
+
+optional_policy(`
+       nscd_socket_use(mail_munin_plugin_t)
+')
 
 optional_policy(`
        postfix_read_config(mail_munin_plugin_t)
@@ -285,6 +291,10 @@ optional_policy(`
        netutils_domtrans_ping(services_munin_plugin_t)
 ')
 
+optional_policy(`
+       nscd_socket_use(services_munin_plugin_t)
+')
+
 optional_policy(`
        postgresql_stream_connect(services_munin_plugin_t)
 ')