On Fri, 2004-11-12 at 07:19, Stephen Smalley wrote: > You still need to add rules allowing httpd to talk to mysqld. Adding > mysqld.te just created a separate domain for it (not sure about the log > file problem). So you still need to add: > allow httpd_t mysqld_var_run_t:sock_file rw_file_perms; > can_unix_connect(httpd_t, mysqld_t) > can_unix_send(httpd_t, mysqld_t) Hmmm...unless it is actually httpd_php_t that is talking to mysqld, and not the httpd_t process itself. In that case, those permissions are already present in the apache.te file. -- Stephen Smalley <sds@xxxxxxxxxxxxxx> National Security Agency
