From e4b887b5b67aab9e81fe7d57403b26d99fde331c Mon Sep 17 00:00:00 2001
From: ETES-Stuttgart <support@etes.de>
Date: Fri, 23 Jan 2026 11:54:30 +0100
Subject: [PATCH] Allow Icinga to send SIGTERM to nagios plugins in SELinux
 Policy

---
 AUTHORS                  | 1 +
 tools/selinux/icinga2.if | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/AUTHORS b/AUTHORS
index 4c631bf1a..7b68c80f1 100644
--- a/AUTHORS
+++ b/AUTHORS
@@ -91,6 +91,7 @@ Elias Ohm <eohm@novomind.com>
 Élie Bouttier <elie@bouttier.eu>
 Eric Lippmann <eric.lippmann@icinga.com>
 Egor Kovalchuk <egor.kovalchuk@ossrevival.org>
+ETES-Stuttgart <support@etes.de>
 Evgeni Golov <evgeni@golov.de>
 Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl>
 Fabian Röhl <mail@fabian-roehl.de>
diff --git a/tools/selinux/icinga2.if b/tools/selinux/icinga2.if
index 15fb03478..7be993528 100644
--- a/tools/selinux/icinga2.if
+++ b/tools/selinux/icinga2.if
@@ -364,7 +364,7 @@ interface(`icinga2_execstrans',`
 	')
 
 	domtrans_pattern(icinga2_t, $1, $2)
-        allow icinga2_t $2:process sigkill;
+        allow icinga2_t $2:process { signal sigkill };
 ')
 
 ######################################