Michael Vetter
87239b651d
Initial packaging of mtail. It's a very useful tool in a fairly mature state. OBS-URL: https://build.opensuse.org/request/show/924079 OBS-URL: https://build.opensuse.org/package/show/server:monitoring/mtail?expand=0&rev=1
33 lines
643 B
Plaintext
33 lines
643 B
Plaintext
# Ansible managed: ansible-homelan/master
|
|
|
|
#include <tunables/global>
|
|
|
|
profile mtail /usr/sbin/mtail flags=(attach_disconnected) {
|
|
|
|
#include <abstractions/base>
|
|
|
|
network inet stream,
|
|
network inet6 stream,
|
|
|
|
/etc/ld.so.cache r,
|
|
/etc/nsswitch.conf r,
|
|
/etc/passwd r,
|
|
|
|
@{PROC}/sys/net/core/somaxconn r,
|
|
@{PROC}/@{pid}/fd/ r,
|
|
@{PROC}/@{pid}/{stat,limits} r,
|
|
@{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r,
|
|
|
|
|
|
# grant read access to mtail executable
|
|
/usr/sbin/mtail r,
|
|
|
|
# grant read access to mtail programs
|
|
/etc/mtail/ r,
|
|
/etc/mtail/*.mtail r,
|
|
|
|
# grant read access to observed log files
|
|
/var/log/** r,
|
|
|
|
}
|