ganapathi / rpms / mariadb

Forked from rpms/mariadb 4 years ago
Clone

Blame SOURCES/mariadb-server-galera.te

a555f2
a555f2
module mariadb-server-galera 1.0;
a555f2
a555f2
require {
a555f2
    type mysqld_t;
a555f2
    type rsync_exec_t;
a555f2
    type anon_inodefs_t;
a555f2
    type proc_net_t;
a555f2
    type kerberos_port_t;
a555f2
    class file { read execute execute_no_trans getattr open };
a555f2
    class tcp_socket { name_bind name_connect };
a555f2
    class process { setpgid siginh rlimitinh noatsecure };
a555f2
}
a555f2
a555f2
# allow mysqld to run rsyncd
a555f2
allow mysqld_t self:process setpgid;
a555f2
allow mysqld_t rsync_exec_t:file { read execute execute_no_trans getattr open };
a555f2
allow mysqld_t anon_inodefs_t:file getattr;
a555f2
allow mysqld_t proc_net_t:file { read open };
a555f2
a555f2
# allow rsyncd to listen on port 4444
a555f2
allow mysqld_t kerberos_port_t:tcp_socket { name_bind name_connect };
a555f2