From: Miroslav Grepl <mgrepl@redhat.com>
Date: Fri, 9 Dec 2011 15:05:00 +0000 (+0000)
Subject: Allow munin services plugins to use NSCD services
X-Git-Tag: 000~26^2~2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=67ba6204990b0d6874137971f196dbf748cc78ce;p=people%2Fstevee%2Fselinux-policy.git

Allow munin services plugins to use NSCD services
---

diff --git a/policy/modules/services/munin.te b/policy/modules/services/munin.te
index 9850f4d7..171ebec9 100644
--- a/policy/modules/services/munin.te
+++ b/policy/modules/services/munin.te
@@ -233,10 +233,16 @@ dev_read_urand(mail_munin_plugin_t)
 
 logging_read_generic_logs(mail_munin_plugin_t)
 
-mta_read_config(mail_munin_plugin_t)
-mta_send_mail(mail_munin_plugin_t)
-mta_list_queue(mail_munin_plugin_t)
-mta_read_queue(mail_munin_plugin_t)
+optional_policy(`
+	mta_read_config(mail_munin_plugin_t)
+	mta_send_mail(mail_munin_plugin_t)
+	mta_list_queue(mail_munin_plugin_t)
+	mta_read_queue(mail_munin_plugin_t)
+')
+
+optional_policy(`
+	nscd_socket_use(mail_munin_plugin_t)
+')
 
 optional_policy(`
 	postfix_read_config(mail_munin_plugin_t)
@@ -285,6 +291,10 @@ optional_policy(`
 	netutils_domtrans_ping(services_munin_plugin_t)
 ')
 
+optional_policy(`
+	nscd_socket_use(services_munin_plugin_t)
+')
+
 optional_policy(`
 	postgresql_stream_connect(services_munin_plugin_t)
 ')