Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-32914

Have a mycnf2allow script to generate SElinux policies from my.cnf configuration

    XMLWordPrintable

Details

    • New Feature
    • Status: Open (View Workflow)
    • Minor
    • Resolution: Unresolved
    • None
    • Scripts & Clients
    • None

    Description

      When using custom paths for e.g. datadir nad having SElinux in "enforcing" mode MariaDB server startup will fail with "permission denied" errors as SElinux policies for MariaDB only allow access to the know default paths like datadir=/var/lib/mysql

      So SElinux policies need to be adjusted either using manual selinux fcontext calls, or with the help of the audit2allow utility, both requiring some linux adminstration skills and general understanding of SElinux that not necessarily everyone has.

      So it would be nice to have mycnf2allow (naming up to debate) utility that parses the my.cnf configuration to determine all custom path settings and generates the necessary policy information in one simple step.

      Attachments

        Activity

          People

            Unassigned Unassigned
            hholzgra Hartmut Holzgraefe
            Votes:
            1 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.