2011-08-13 19:15:11

by sven.vermeulen

Subject: [refpolicy] [PATCH 1/1] Allow zabbix to connect to mysql through TCP

The mysql_stream_connect interface, which is already in use, is only for local
MySQL databases (not through TCP/IP).

Signed-off-by: Sven Vermeulen <[email protected]>
---
policy/modules/services/zabbix.te | 1 +
1 files changed, 1 insertions(+), 0 deletions(-)

diff --git a/policy/modules/services/zabbix.te b/policy/modules/services/zabbix.te
index 3486802..63832db 100644
--- a/policy/modules/services/zabbix.te
+++ b/policy/modules/services/zabbix.te
@@ -71,6 +71,7 @@ zabbix_agent_tcp_connect(zabbix_t)

optional_policy(`
mysql_stream_connect(zabbix_t)
+ mysql_tcp_connect(zabbix_t)
')

optional_policy(`
--
1.7.3.4

2011-08-16 19:22:29

by cpebenito

Subject: [refpolicy] [PATCH 1/1] Allow zabbix to connect to mysql through TCP

On 8/13/2011 3:15 PM, Sven Vermeulen wrote:
> The mysql_stream_connect interface, which is already in use, is only for local
> MySQL databases (not through TCP/IP).

Merged.

> Signed-off-by: Sven Vermeulen<[email protected]>
> ---
> policy/modules/services/zabbix.te | 1 +
> 1 files changed, 1 insertions(+), 0 deletions(-)
>
> diff --git a/policy/modules/services/zabbix.te b/policy/modules/services/zabbix.te
> index 3486802..63832db 100644
> --- a/policy/modules/services/zabbix.te
> +++ b/policy/modules/services/zabbix.te
> @@ -71,6 +71,7 @@ zabbix_agent_tcp_connect(zabbix_t)
>
> optional_policy(`
> mysql_stream_connect(zabbix_t)
> + mysql_tcp_connect(zabbix_t)
> ')
>
> optional_policy(`


--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com