Yes please! audit2why (or maybe audit2allow) should recommend the same thing.
-josh
On Mar 15, 2013, at 5:54 PM, Kevin Fenzi <kevin@xxxxxxxxx> wrote:
> On Thu, 14 Mar 2013 08:58:38 +0000
> Mahrud Sayrafi <dinovirus+NOSPAM@xxxxxxxxx> wrote:
>
> ...snip...
>
>> + # Fix SELinux AVCs due to httpd trying to connect to mysql tcp port
>> + if ($operatingsystem == "RedHat" and $operatingsystemrelease >= 6)
>> {
>> + selinux-policy::custom { 'paste': }
>> + }
>> }
>>
>> # Proxy setup
>
> I think we could do this one via the httpd_can_network_connect_db
> selinux boolean?
>
> kevin
> _______________________________________________
> infrastructure mailing list
> infrastructure@xxxxxxxxxxxxxxxxxxxxxxx
> https://admin.fedoraproject.org/mailman/listinfo/infrastructure
_______________________________________________
infrastructure mailing list
infrastructure@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/infrastructure
