Custom SNMP scripts

[Frederick William New <Frederick-William.New@xxxxxxxx>]

Hi,

Is there recommended way of setting up custom SNMP (net-snmp) scripts used for monitoring the status of software or hardware RAID, Web site hits, etc.?  I created a special directory for them - /usr/local/snmp/bin/, and then let sealert and audit2allow tell me what to do.  My snmpScripts.te on a server with software RAID looks like this:


module snmpScripts 1.0;

require {
        type snmpd_t;
        type proc_mdstat_t;
        type usr_t;
        class file { ioctl execute read open getattr execute_no_trans };
}

#============= snmpd_t ==============

Is there a better or more secure way of doing this?

Fred New
Systems administrator
Elion Ettevõtted AS
Tallinn, Estonia

--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux