[PATCH 2/2] Fix SELinux AVCs on paste hosts due to httpd trying to connect to mysql

Kevin Fenzi kevin at scrye.com
Fri Mar 15 21:54:58 UTC 2013


On Thu, 14 Mar 2013 08:58:38 +0000
Mahrud Sayrafi <dinovirus+NOSPAM at gmail.com> wrote:

...snip...

> +  # Fix SELinux AVCs due to httpd trying to connect to mysql tcp port
> +  if ($operatingsystem == "RedHat" and $operatingsystemrelease >= 6)
> {
> +    selinux-policy::custom { 'paste': }
> +  }
>  } 
>  
>  # Proxy setup

I think we could do this one via the httpd_can_network_connect_db
selinux boolean?

kevin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: not available
URL: <http://lists.fedoraproject.org/pipermail/infrastructure/attachments/20130315/90e87d2b/attachment.sig>


More information about the infrastructure mailing list