Yes please! audit2why (or maybe audit2allow) should recommend the same thing.
-josh
On Mar 15, 2013, at 5:54 PM, Kevin Fenzi <kevin(a)scrye.com> wrote:
On Thu, 14 Mar 2013 08:58:38 +0000
Mahrud Sayrafi <dinovirus+NOSPAM(a)gmail.com> wrote:
...snip...
> + # Fix SELinux AVCs due to httpd trying to connect to mysql tcp port
> + if ($operatingsystem == "RedHat" and $operatingsystemrelease >= 6)
> {
> + selinux-policy::custom { 'paste': }
> + }
> }
>
> # Proxy setup
I think we could do this one via the httpd_can_network_connect_db
selinux boolean?
kevin
_______________________________________________
infrastructure mailing list
infrastructure(a)lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/infrastructure