provide mysql access to guest_u

[Dominick Grift]

On Tue, 2013-02-05 at 08:23 +0530, Lakshmipathi.G wrote:
> Hi -
> I have  a restricted account with guest_u.How to provide
> mysql access to guest_u without breaking other services?
> 
> I tried
> "setsebool -P allow_user_mysql_connect 1"
> 
> Still it says -
> ERROR 2002 (HY000): Can't connect to local MySQL server through socket
> '/var/lib/mysql/mysql.sock' (13)
> 
> 
> Thanks for help.
> 
> 

This probably:

mkdir mytest; cd mytest; cat > mytest.te <<EOF
policy_module(mytest,1.0.0)
optional_policy(`
	gen_require(`
		type guest_t;
	')

	mysql_stream_connect(guest_t)
')
EOF
make -f /usr/share/selinux/devel/Makefile mytest.pp
sudo semodule -i mytest.pp

> -- 
> ----
> Cheers,
> Lakshmipathi.G
> FOSS Programmer.
> www.giis.co.in 
> --
> selinux mailing list
> selinux at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/selinux