Moved standard library paths and inventory bundles from common to agent type to simplify SELinux policy

craigcomstock · craigcomstock · commit 7a219d6a2797 · 2025-05-05T10:23:39.000-05:00
This should simplify selinux policy where we want the agent to have broad access but other components like serverd, execd, hub to have more limited access. The paths bundle checks for the existence of many commands and this operation can cause SELinux AVCs. The inventory bundle uses the curl command to see if the host is an AWS instance and if so collects some inventory from a well known API/IP. Ticket: ENT-12954 Changelog: title
diff --git a/inventory/any.cf b/inventory/any.cf
@@ -1,4 +1,4 @@
-bundle common inventory_any
+bundle agent inventory_any
 # @brief Do inventory for any OS
 #
 # This common bundle is for any OS work not handled by specific
@@ -593,7 +593,7 @@ bundle agent cfe_autorun_inventory_cpuinfo
       "$(const.t) CPU physical cores: $(cpuinfo_physical_cores)";
 }
 
-bundle common cfe_autorun_inventory_aws
+bundle agent cfe_autorun_inventory_aws
 # @brief inventory AWS EC2 instances
 #
 # Provides:
diff --git a/lib/paths.cf b/lib/paths.cf
@@ -1,6 +1,6 @@
 # Paths bundle (used by other bodies)
 
-bundle common paths
+bundle agent paths
 # @brief Defines an array `path` with common paths to standard binaries and
 # directories as well as classes for defined and existing paths.
 #

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-bundle common inventory_any`
	`1`	`+bundle agent inventory_any`
`2`	`2`	`# @brief Do inventory for any OS`
`3`	`3`	`#`
`4`	`4`	`# This common bundle is for any OS work not handled by specific`
`@@ -593,7 +593,7 @@ bundle agent cfe_autorun_inventory_cpuinfo`
`593`	`593`	`"$(const.t) CPU physical cores: $(cpuinfo_physical_cores)";`
`594`	`594`	`}`
`595`	`595`
`596`		`-bundle common cfe_autorun_inventory_aws`
	`596`	`+bundle agent cfe_autorun_inventory_aws`
`597`	`597`	`# @brief inventory AWS EC2 instances`
`598`	`598`	`#`
`599`	`599`	`# Provides:`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`# Paths bundle (used by other bodies)`
`2`	`2`
`3`		`-bundle common paths`
	`3`	`+bundle agent paths`
`4`	`4`	# @brief Defines an array `path` with common paths to standard binaries and
`5`	`5`	`# directories as well as classes for defined and existing paths.`
`6`	`6`	`#`