forked from pool/monitoring-plugins-repomd
a3c178b8a1
+ be a bit more robust if curl fails or produces unknown output - include abstractions/bash and abstractions/openssl in the apparmor profile to avoid misleading DENIED messages in audit log OBS-URL: https://build.opensuse.org/package/show/server:monitoring/monitoring-plugins-repomd?expand=0&rev=11
25 lines
545 B
Plaintext
25 lines
545 B
Plaintext
#include <tunables/global>
|
|
|
|
/usr/lib/nagios/plugins/check_repomd {
|
|
#include <abstractions/base>
|
|
#include <abstractions/bash>
|
|
#include <abstractions/consoles>
|
|
#include <abstractions/nameservice>
|
|
#include <abstractions/openssl>
|
|
|
|
network inet,
|
|
|
|
/{usr/,}bin/bash rix,
|
|
/{usr/,}bin/grep rix,
|
|
/usr/bin/curl rix,
|
|
/{usr/,}bin/cat rix,
|
|
/{usr/,}bin/mktemp rix,
|
|
/{usr/,}bin/rm rix,
|
|
/usr/bin/cut rix,
|
|
/{usr/,}bin/date rix,
|
|
/usr/lib/nagios/plugins/utils.sh r,
|
|
/proc/sys/crypto/fips_enabled r,
|
|
owner /tmp/check_repomd* rw,
|
|
}
|
|
|