Allow postgresql to connect to his unix_stream_socket
PATCH 13/15 Allow postgresql to connect to his unix_stream_socket
Required in order to start postgresql and test activities with psql command.
Signed-off-by Sven Vermeulen <[email protected]>
--- policy/modules/services/postgresql.te | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-)
policy/modules/services/postgresql.te +1 -1
@@ -205,7 +205,7 @@ allow postgresql_t self:shm create_shm_perms; allow postgresql_t self:tcp_socket create_stream_socket_perms; allow postgresql_t self:udp_socket create_stream_socket_perms; allow postgresql_t self:unix_dgram_socket create_socket_perms; -allow postgresql_t self:unix_stream_socket create_stream_socket_perms; +allow postgresql_t self:unix_stream_socket { connectto create_stream_socket_perms }; allow postgresql_t self:netlink_selinux_socket create_socket_perms; allow postgresql_t sepgsql_database_type:db_database *;
Signature · 1 line
1.7.3.4
PATCH 13/15 Allow postgresql to connect to his unix_stream_socket
Quoted 1 line · Sven Vermeulen
Required in order to start postgresql and test activities with psql command.
Sounds like psql needs its own domain. Especially in light of patch 14.
Quoted 18 lines
Signed-off-by Sven Vermeulen <[email protected]>--- policy/modules/services/postgresql.te | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-)policy/modules/services/postgresql.te +1
-1@@ -205,7 +205,7 @@ allow postgresql_t self:shm create_shm_perms; allow postgresql_t self:tcp_socket create_stream_socket_perms; allow postgresql_t self:udp_socket create_stream_socket_perms; allow postgresql_t self:unix_dgram_socket create_socket_perms; -allow postgresql_t self:unix_stream_socket create_stream_socket_perms; +allow postgresql_t self:unix_stream_socket { connectto create_stream_socket_perms }; allow postgresql_t self:netlink_selinux_socket create_socket_perms; allow postgresql_t sepgsql_database_type:db_database *;
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com