Attachment 887035 Details for Bug 1088735 – mymysql.te custom policy to selectively eliminate mysql avcs

mymysql.te custom policy to selectively eliminate mysql avcs

mymysql.te (text/plain), 1.08 KB, created by Richard Su on 2014-04-17 05:15:09 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Richard Su

Created: 2014-04-17 05:15:09 UTC

Size: 1.08 KB

patch

obsolete

>
>module mymysql 1.0;
>
>require {
>	type neutron_t;
>	type glance_registry_t;
>	type mysqld_var_run_t;
>	type nova_api_t;
>	type nova_scheduler_t;
>	type nova_console_t;
>	type nova_cert_t;
>	type keystone_t;
>	type var_lib_t;
>	class sock_file write;
>	class lnk_file read;
>	class dir search;
>}
>
>#============= glance_registry_t ==============
>allow glance_registry_t var_lib_t:lnk_file read;
>
>#============= keystone_t ==============
>allow keystone_t var_lib_t:lnk_file read;
>
>#============= neutron_t ==============
>allow neutron_t var_lib_t:lnk_file read;
>
>#============= nova_api_t ==============
>allow nova_api_t mysqld_var_run_t:dir search;
>allow nova_api_t mysqld_var_run_t:sock_file write;
>allow nova_api_t var_lib_t:lnk_file read;
>
>#============= nova_cert_t ==============
>allow nova_cert_t var_lib_t:lnk_file read;
>
>#============= nova_console_t ==============
>allow nova_console_t var_lib_t:lnk_file read;
>
>#============= nova_scheduler_t ==============
>allow nova_scheduler_t mysqld_var_run_t:dir search;
>allow nova_scheduler_t mysqld_var_run_t:sock_file write;
>allow nova_scheduler_t var_lib_t:lnk_file read;

Actions: View

Attachments on bug 1088735: 887033 | 887034 | 887035