Which brings another question, how do I get simple policy changes
merged? I've got a bunch of tweaks that I use here that other people
will want to use eventually, like mysql support for postfix - a bit like
the use flag:
allow postfix_$1_t mysqld_t:unix_stream_socket connectto;
allow postfix_$1_t mysqld_var_run_t:dir search;
allow postfix_$1_t mysqld_var_run_t:sock_file write;
Merged where? To the Gentoo policy?
The gentoo package does have a use flag for mysql in postfix, but this
change could apply equally well to the reference policy, right?
Also, sorry to hijack the thread, but where can I enable
apache_read_user_content?
Not sure what you mean by this.
To allow apache to read ~/public_html, I added:
allow httpd_t file_t:file { getattr unlink };
allow httpd_t httpd_user_content_t:dir { getattr read search };
allow httpd_t httpd_user_content_t:file { getattr read };
allow httpd_t user_home_dir_t:dir { getattr search };
But surely there is a cleaner way of doing this using:
apache_read_user_content( domain_prefix , domain )
and (optionally)
apache_read_user_scripts( domain_prefix , domain )
Must be a boolean somewhere?
Thanks
Antoine
--
[EMAIL PROTECTED] mailing list
