provide mysql access to guest_u

Dominick Grift dominick.grift at gmail.com
Wed Feb 6 08:12:20 UTC 2013


On Wed, 2013-02-06 at 08:25 +0530, Lakshmipathi.G wrote:

> 
> One more question, what's the usage of 'optional_policy' in above
> te file? 
>     

It takes care of dependencies. For example without the optional policy
rules you would not be able to disable or remove either the mysqld or
guest policy module. because there is a dependency. the mytest policy
module depends on them.

but now since the rules are wrapped in optional policy you will still be
able to disable the mysqld and guest modules if you so desire

basically it tells selinux, use these rules if you can and if you cannot
then no problem.

The reason i wrapped it in optional policy is that if you ever for some
reason want to disable or remove mysqld or guest modules you will be
able to do so easily and you wont get any cryptic messages about
dependencies




More information about the selinux mailing list