MySQL custom datadir location - other daemons too

Florin Andrei florin at andrei.myip.org
Sun Apr 22 01:48:09 UTC 2007


Jan-Frode Myklebust wrote:
> On 2007-04-21, Florin Andrei <florin at andrei.myip.org> wrote:
> 
>> # grep /db /etc/fstab
>> LABEL=/db /db ext3 defcontext=system_u:object_r:var_t:s0 1 2
> 
> That doesn't look right to me.. I think you should label it mysqld_db_t, 
> not var_t. mysqld_db_t should mean only mysql will have access to these
> files and directories, while var_t is much more open. Lots of apps 
> probably have access to var_t.

Well, I was just trying to replicate the situation in /var
I thought - the least amount of changes, the least amount of headaches.

But I'll try both and see what happens.

> But -- you should probably do either mount option, or "semanage fcontext".
> No need to do both.

Got it.

-- 
Florin Andrei

http://florin.myip.org/




More information about the selinux mailing list