mariadb11.8/mariadb-server-galera.cil
Pavol Sloboda 01c3ed1a1d Updated the cil selinux rules for galera to install properly
added the missing bracket and removed the illegal . from the name and
replaced it with a _

This issue has been found after recieving a dnf error during
installation of the mariadb-server-galera package:
>>> Scriptlet output:
>>> Close parenthesis without matching open at line 15 of /var/lib/selinux/targeted/tmp/modules/200/mariadb-server-galera/cil
>>> libsemanage.semanage_load_files: Error while reading from file /var/lib/selinux/targeted/tmp/modules/200/mariadb-server-galera/cil. (No such file or directory).
>>> semodule:  Failed!

and the subsequent call of `semodule -lfull | grep galera`
prints nothing and returns 1

The expected output for the installation is to go through normally
without the above mentioned error

And the expected output for `semodule -lfull | grep galera` is:
200 mariadb-server-galera                  cil

and the command returning 0
2025-07-23 09:10:26 +02:00

16 lines
648 B
Plaintext

(optional mariadb-server-galera-1_0
(typeattributeset cil_gen_require mysqld_t)
(typeattributeset cil_gen_require rsync_exec_t)
(typeattributeset cil_gen_require anon_inodefs_t)
(typeattributeset cil_gen_require proc_net_t)
(typeattributeset cil_gen_require kerberos_port_t)
; allow mysqld to run rsyncd
(allow mysqld_t self (process (setpgid)))
(allow mysqld_t rsync_exec_t (file (read execute execute_no_trans getattr open)))
(allow mysqld_t anon_inodefs_t (file (getattr)))
(allow mysqld_t proc_net_t (file (read open)))
; allow rsyncd to listen on port 4444
(allow mysqld_t kerberos_port_t (tcp_socket (name_bind name_connect)))
)