- update apparmor profiles:
- check_load: allow to read /run/systemd/sessions/* - check_procs: allow to read /sys/devices/system/node/ OBS-URL: https://build.opensuse.org/package/show/server:monitoring/monitoring-plugins?expand=0&rev=125
This commit is contained in:
14
usr.lib.nagios.plugins.check_procs
Normal file
14
usr.lib.nagios.plugins.check_procs
Normal file
@@ -0,0 +1,14 @@
|
||||
#include <tunables/global>
|
||||
/usr/lib/nagios/plugins/check_procs flags=(attach_disconnected) {
|
||||
#include <abstractions/nameservice>
|
||||
#include <abstractions/base>
|
||||
#include <abstractions/consoles>
|
||||
|
||||
capability sys_ptrace,
|
||||
|
||||
/{usr/,}bin/ps rix,
|
||||
/proc/ r,
|
||||
/proc/** r,
|
||||
/sys/devices/system/node/ r,
|
||||
/usr/lib/nagios/plugins/check_procs mr,
|
||||
}
|
Reference in New Issue
Block a user