Mysql patch from Dan Walsh.

This commit is contained in:
Chris PeBenito 2009-12-18 10:44:35 -05:00
parent d3c612ffd8
commit 80f0587459

View File

@ -1,5 +1,5 @@
policy_module(mysql, 1.11.0) policy_module(mysql, 1.11.1)
######################################## ########################################
# #
@ -64,7 +64,7 @@ files_tmp_filetrans(mysqld_t, mysqld_tmp_t, { file dir })
manage_files_pattern(mysqld_t, mysqld_var_run_t, mysqld_var_run_t) manage_files_pattern(mysqld_t, mysqld_var_run_t, mysqld_var_run_t)
manage_sock_files_pattern(mysqld_t, mysqld_var_run_t, mysqld_var_run_t) manage_sock_files_pattern(mysqld_t, mysqld_var_run_t, mysqld_var_run_t)
files_pid_filetrans(mysqld_t, mysqld_var_run_t,{ file sock_file }) files_pid_filetrans(mysqld_t, mysqld_var_run_t, { file sock_file })
kernel_read_system_state(mysqld_t) kernel_read_system_state(mysqld_t)
kernel_read_kernel_sysctls(mysqld_t) kernel_read_kernel_sysctls(mysqld_t)
@ -137,6 +137,11 @@ allow mysqld_safe_t self:fifo_file rw_fifo_file_perms;
domtrans_pattern(mysqld_safe_t, mysqld_exec_t, mysqld_t) domtrans_pattern(mysqld_safe_t, mysqld_exec_t, mysqld_t)
allow mysqld_safe_t mysqld_log_t:file manage_file_perms; allow mysqld_safe_t mysqld_log_t:file manage_file_perms;
allow mysqld_safe_t mysqld_var_run_t:sock_file unlink;
domain_read_all_domains_state(mysqld_safe_t)
logging_log_filetrans(mysqld_safe_t, mysqld_log_t, file) logging_log_filetrans(mysqld_safe_t, mysqld_log_t, file)
kernel_read_system_state(mysqld_safe_t) kernel_read_system_state(mysqld_safe_t)
@ -152,7 +157,7 @@ hostname_exec(mysqld_safe_t)
miscfiles_read_localization(mysqld_safe_t) miscfiles_read_localization(mysqld_safe_t)
mysql_append_db_files(mysqld_safe_t) mysql_manage_db_files(mysqld_safe_t)
mysql_read_config(mysqld_safe_t) mysql_read_config(mysqld_safe_t)
mysql_search_pid_files(mysqld_safe_t) mysql_search_pid_files(mysqld_safe_t)
mysql_write_log(mysqld_safe_t) mysql_write_log(mysqld_safe_t)