Stephen Smalley schrieb:
On Fri, 2004-11-12 at 07:19, Stephen Smalley wrote:
You still need to add rules allowing httpd to talk to mysqld. Adding mysqld.te just created a separate domain for it (not sure about the log file problem). So you still need to add: allow httpd_t mysqld_var_run_t:sock_file rw_file_perms; can_unix_connect(httpd_t, mysqld_t) can_unix_send(httpd_t, mysqld_t)
Hmmm...unless it is actually httpd_php_t that is talking to mysqld, and not the httpd_t process itself. In that case, those permissions are already present in the apache.te file.
I have an other problem with mysql: i got this errormessage when i executed a query: mySQL query error: SELECT p.*,t.title,t.posts,m.avatar_location,m.avatar_size,m.avatar_type FROM ibf_posts p LEFT JOIN ibf_topics t ON p.topic_id=t.tid LEFT JOIN ibf_member_extra m ON m.id=p.author_id where t.forum_id IN (2) AND t.approved=1 group by p.topic_id order by p.post_date DESC LIMIT 0,5
mySQL error: Can't create/write to file '/tmp/#sqla12_e_0.MYI' (Errcode: 13) in dmesg I have this messages: audit(1100500197.839:0): avc: denied { write } for pid=3912 exe=/usr/libexec/mysqld name=tmp dev=hda3 ino=24 scontext=user_u:system_r:mysqld_t tcontext=root:object_r:root_t tclass=dir audit(1100500209.169:0): avc: denied { write } for pid=3913 exe=/usr/libexec/mysqld name=tmp dev=hda3 ino=24 scontext=user_u:system_r:mysqld_t tcontext=root:object_r:root_t tclass=dir