On Mon, 2008-06-23 at 18:23 +0900, KaiGai Kohei wrote: > The attached patch allows CGI scripts to connect PostgreSQL > via unix domain socket, as MySQL doing. Merged. > > > > > > differences > between files > attachment > (refpolicy-cgi-pgsql-stream.patch) > > Index: refpolicy/policy/modules/services/apache.te > =================================================================== > --- refpolicy/policy/modules/services/apache.te (revision 2727) > +++ refpolicy/policy/modules/services/apache.te (working copy) > @@ -559,6 +559,10 @@ > ') > > optional_policy(` > + postgresql_stream_connect(httpd_php_t) > +') > + > +optional_policy(` > nis_use_ypbind(httpd_php_t) > ') > > @@ -703,6 +707,10 @@ > mysql_rw_db_sockets(httpd_sys_script_t) > ') > > +optional_policy(` > + postgresql_stream_connect(httpd_sys_script_t) > +') > + > ######################################## > # > # httpd_rotatelogs local policy > -- Chris PeBenito Tresys Technology, LLC (410) 290-1411 x150 -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
