From f0b08fdbf2ac1c6bbbeba9a96babfae8277ed3ef Mon Sep 17 00:00:00 2001 From: CoprDistGit Date: Sun, 20 Aug 2023 10:47:28 +0000 Subject: automatic import of mariadb --- mariadb-server-galera.te | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 mariadb-server-galera.te (limited to 'mariadb-server-galera.te') diff --git a/mariadb-server-galera.te b/mariadb-server-galera.te new file mode 100644 index 0000000..bdce127 --- /dev/null +++ b/mariadb-server-galera.te @@ -0,0 +1,23 @@ + +module mariadb-server-galera 1.0; + +require { + type mysqld_t; + type rsync_exec_t; + type anon_inodefs_t; + type proc_net_t; + type kerberos_port_t; + class file { read execute execute_no_trans getattr open }; + class tcp_socket { name_bind name_connect }; + class process { setpgid siginh rlimitinh noatsecure }; +} + +# allow mysqld to run rsyncd +allow mysqld_t self:process setpgid; +allow mysqld_t rsync_exec_t:file { read execute execute_no_trans getattr open }; +allow mysqld_t anon_inodefs_t:file getattr; +allow mysqld_t proc_net_t:file { read open }; + +# allow rsyncd to listen on port 4444 +allow mysqld_t kerberos_port_t:tcp_socket { name_bind name_connect }; + -- cgit v1.2.3