node=<hostname> type=AVC msg=audit(1643730988.007:62064): avc:  denied  { getattr } for  pid=1309 comm="ftdc" path="/mnt/software" dev="0:42" ino=3267542206855034467 scontext=system_u:system_r:mongod_t:s0 tcontext=system_u:object_r:nfs_t:s0 tclass=dir permissive=0

node=<hostname> type=SYSCALL msg=audit(1643730988.007:62064): arch=c000003e syscall=4 success=no exit=-13 a0=7fe2dd99f1b0 a1=7fe2dd99eee0 a2=7fe2dd99eee0 a3=0 items=1 ppid=1 pid=1309 auid=4294967295 uid=995 gid=991 euid=995 suid=995 fsuid=995 egid=991 sgid=991 fsgid=991 tty=(none) ses=4294967295 comm="ftdc" exe="/usr/bin/mongod" subj=system_u:system_r:mongod_t:s0 key=(null)

node=<hostname> type=CWD msg=audit(1643730988.007:62064):  cwd="/"

node=<hostname> type=PATH msg=audit(1643730988.007:62064): item=0 name="/mnt/software" inode=3267542206855034467 dev=00:2a mode=040777 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:nfs_t:s0 objtype=NORMAL cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0

node=<hostname> type=PROCTITLE msg=audit(1643730988.007:62064): proctitle=2F7573722F62696E2F6D6F6E676F64002D66002F6574632F6D6F6E676F642E636F6E66

 gen_require(`
        type proc_net_t;
+       type configfs_t;
+       type file_type;
-        class dir search;
+        class dir { search getattr };
        class file { getattr open read write};
 ')
# Permits mongod_t to access /proc/net/snmp
 allow mongod_t proc_net_t:file { open read };

 # Permits mongod_t to access /sys/fs/cgroup/memory/memory.limit_in_bytes
-allow mongod_t cgroup_t:dir search;
+allow mongod_t cgroup_t:dir { search getattr } ;
 allow mongod_t cgroup_t:file { getattr open read };

+# Permits mongod_t to get mounted directory information, for disk utilization monitoring
+allow mongod_t file_type:file getattr;
+allow mongod_t file_type:dir { getattr search };
+allow mongod_t configfs_t:dir getattr;