The attached patch allows CGI scripts to connect PostgreSQL via unix domain socket, as MySQL doing. Please apply it. Thanks, -- OSS Platform Development Division, NEC KaiGai Kohei <kaigai@xxxxxxxxxxxxx>
Index: refpolicy/policy/modules/services/apache.te =================================================================== --- refpolicy/policy/modules/services/apache.te (revision 2727) +++ refpolicy/policy/modules/services/apache.te (working copy) @@ -559,6 +559,10 @@ ') optional_policy(` + postgresql_stream_connect(httpd_php_t) +') + +optional_policy(` nis_use_ypbind(httpd_php_t) ') @@ -703,6 +707,10 @@ mysql_rw_db_sockets(httpd_sys_script_t) ') +optional_policy(` + postgresql_stream_connect(httpd_sys_script_t) +') + ######################################## # # httpd_rotatelogs local policy
