Allow port 4444 in SELinux for Galera SST replication
This commit is contained in:
parent
c487d09e4d
commit
d83bf98182
11
mariadb.spec
11
mariadb.spec
@ -1232,11 +1232,16 @@ export MTR_BUILD_THREAD=%{__isa_bits}
|
|||||||
|
|
||||||
%if %{with galera}
|
%if %{with galera}
|
||||||
%post server-galera
|
%post server-galera
|
||||||
# Do what README at support-files/policy/selinux/README and upstream page
|
# Allow ports needed for the replication:
|
||||||
# http://galeracluster.com/documentation-webpages/firewallsettings.html recommend:
|
# https://mariadb.com/kb/en/library/configuring-mariadb-galera-cluster/#network-ports
|
||||||
semanage port -a -t mysqld_port_t -p tcp 4568 >/dev/null 2>&1 || :
|
# Galera Replication Port
|
||||||
semanage port -a -t mysqld_port_t -p tcp 4567 >/dev/null 2>&1 || :
|
semanage port -a -t mysqld_port_t -p tcp 4567 >/dev/null 2>&1 || :
|
||||||
semanage port -a -t mysqld_port_t -p udp 4567 >/dev/null 2>&1 || :
|
semanage port -a -t mysqld_port_t -p udp 4567 >/dev/null 2>&1 || :
|
||||||
|
# IST Port
|
||||||
|
semanage port -a -t mysqld_port_t -p tcp 4568 >/dev/null 2>&1 || :
|
||||||
|
# SST Port
|
||||||
|
semanage port -a -t mysqld_port_t -p tcp 4444 >/dev/null 2>&1 || :
|
||||||
|
|
||||||
semodule -i %{_datadir}/selinux/packages/%{name}/%{name}-server-galera.pp >/dev/null 2>&1 || :
|
semodule -i %{_datadir}/selinux/packages/%{name}/%{name}-server-galera.pp >/dev/null 2>&1 || :
|
||||||
%endif
|
%endif
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user