Hi,
Is there recommended way of setting up custom SNMP (net-snmp) scripts used for monitoring
the status of software or hardware RAID, Web site hits, etc.? I created a special
directory for them - /usr/local/snmp/bin/, and then let sealert and audit2allow tell me
what to do. My snmpScripts.te on a server with software RAID looks like this:
module snmpScripts 1.0;
require {
type snmpd_t;
type proc_mdstat_t;
type usr_t;
class file { ioctl execute read open getattr execute_no_trans };
}
#============= snmpd_t ==============
Is there a better or more secure way of doing this?
Fred New
Systems administrator
Elion Ettevõtted AS
Tallinn, Estonia