All of lore.kernel.org
 help / color / mirror / Atom feed
* [refpolicy] [PATCH 1/1] Allow zabbix to connect to mysql through TCP
@ 2011-08-13 19:15 Sven Vermeulen
  2011-08-16 19:22 ` Christopher J. PeBenito
  0 siblings, 1 reply; 2+ messages in thread
From: Sven Vermeulen @ 2011-08-13 19:15 UTC (permalink / raw)
  To: refpolicy

The mysql_stream_connect interface, which is already in use, is only for local
MySQL databases (not through TCP/IP).

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
---
 policy/modules/services/zabbix.te |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)

diff --git a/policy/modules/services/zabbix.te b/policy/modules/services/zabbix.te
index 3486802..63832db 100644
--- a/policy/modules/services/zabbix.te
+++ b/policy/modules/services/zabbix.te
@@ -71,6 +71,7 @@ zabbix_agent_tcp_connect(zabbix_t)
 
 optional_policy(`
 	mysql_stream_connect(zabbix_t)
+	mysql_tcp_connect(zabbix_t)
 ')
 
 optional_policy(`
-- 
1.7.3.4

^ permalink raw reply related	[flat|nested] 2+ messages in thread

* [refpolicy] [PATCH 1/1] Allow zabbix to connect to mysql through TCP
  2011-08-13 19:15 [refpolicy] [PATCH 1/1] Allow zabbix to connect to mysql through TCP Sven Vermeulen
@ 2011-08-16 19:22 ` Christopher J. PeBenito
  0 siblings, 0 replies; 2+ messages in thread
From: Christopher J. PeBenito @ 2011-08-16 19:22 UTC (permalink / raw)
  To: refpolicy

On 8/13/2011 3:15 PM, Sven Vermeulen wrote:
> The mysql_stream_connect interface, which is already in use, is only for local
> MySQL databases (not through TCP/IP).

Merged.

> Signed-off-by: Sven Vermeulen<sven.vermeulen@siphos.be>
> ---
>   policy/modules/services/zabbix.te |    1 +
>   1 files changed, 1 insertions(+), 0 deletions(-)
>
> diff --git a/policy/modules/services/zabbix.te b/policy/modules/services/zabbix.te
> index 3486802..63832db 100644
> --- a/policy/modules/services/zabbix.te
> +++ b/policy/modules/services/zabbix.te
> @@ -71,6 +71,7 @@ zabbix_agent_tcp_connect(zabbix_t)
>
>   optional_policy(`
>   	mysql_stream_connect(zabbix_t)
> +	mysql_tcp_connect(zabbix_t)
>   ')
>
>   optional_policy(`


-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2011-08-16 19:22 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2011-08-13 19:15 [refpolicy] [PATCH 1/1] Allow zabbix to connect to mysql through TCP Sven Vermeulen
2011-08-16 19:22 ` Christopher J. PeBenito

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.