Jan-Frode Myklebust wrote:
On 2007-04-21, Florin Andrei <florin@xxxxxxxxxxxxxxx> wrote:
# grep /db /etc/fstab
LABEL=/db /db ext3 defcontext=system_u:object_r:var_t:s0 1 2
That doesn't look right to me.. I think you should label it mysqld_db_t,
not var_t. mysqld_db_t should mean only mysql will have access to these
files and directories, while var_t is much more open. Lots of apps
probably have access to var_t.
Well, I was just trying to replicate the situation in /var
I thought - the least amount of changes, the least amount of headaches.
But I'll try both and see what happens.
But -- you should probably do either mount option, or "semanage fcontext".
No need to do both.
Got it.
--
Florin Andrei
http://florin.myip.org/
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
