Re: provide mysql access to guest_u
On Wed, 2013-02-06 at 08:25 +0530, Lakshmipathi.G wrote:
One more question, what's the usage of 'optional_policy' in above
te file?
It takes care of dependencies. For example without the optional policy
rules you would not be able to disable or remove either the mysqld or
guest policy module. because there is a dependency. the mytest policy
module depends on them.
but now since the rules are wrapped in optional policy you will still be
able to disable the mysqld and guest modules if you so desire
basically it tells selinux, use these rules if you can and if you cannot
then no problem.
The reason i wrapped it in optional policy is that if you ever for some
reason want to disable or remove mysqld or guest modules you will be
able to do so easily and you wont get any cryptic messages about
dependencies