Description of problem:
In bug 1451318, Tomcat was allowed to connect to PostgreSQL port, but there should be a boolean for that
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Try to access PostgreSQL from application running in Tomcat
(for me it was Spacewalk)
Application running in Tomcat is allowed to access PostgreSQL by default
This should not be allowed by default. Apache also have extra boolean:
$ getsebool -a | grep httpd
httpd_can_network_connect --> off
httpd_can_network_connect_db --> off
It was implemented in bug 1451318 and this bug is a sibling of bug 1477887.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.