From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from jazzdrum.ncsc.mil (zombie.ncsc.mil [144.51.88.131])
	by tycho.ncsc.mil (8.12.8/8.12.8) with ESMTP id iATFO1Ii011383
	for <selinux@tycho.nsa.gov>; Mon, 29 Nov 2004 10:24:01 -0500 (EST)
Received: from mx1.redhat.com (jazzdrum.ncsc.mil [144.51.5.7])
	by jazzdrum.ncsc.mil (8.12.10/8.12.10) with ESMTP id iATFO0km003205
	for <selinux@tycho.nsa.gov>; Mon, 29 Nov 2004 15:24:04 GMT
Message-ID: <41AB3F0B.6050104@redhat.com>
Date: Mon, 29 Nov 2004 10:23:55 -0500
From: Daniel J Walsh <dwalsh@redhat.com>
MIME-Version: 1.0
To: petre rodan <kaiowas@gentoo.org>
CC: jwcart2@epoch.ncsc.mil, SELinux <selinux@tycho.nsa.gov>
Subject: Re: gentoo policy for dante
References: <4198E94B.8070008@gentoo.org>	 <1100808438.26930.28.camel@moss-lions.epoch.ncsc.mil>	 <419D1ABD.4020901@gentoo.org> <1100893919.31793.32.camel@moss-lions.epoch.ncsc.mil> <41A02530.3070505@redhat.com> <41A99F8C.4080503@gentoo.org>
In-Reply-To: <41A99F8C.4080503@gentoo.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Sender: owner-selinux@tycho.nsa.gov
List-Id: selinux@tycho.nsa.gov

petre rodan wrote:

>
> Hi Daniel,
>
> Daniel J Walsh wrote:
>
>> Small change on previous patch.
>>
>> Please ignore previous patch and use this one.
>
> >
>
>> --- nsapolicy/domains/program/unused/postgresql.te    2004-11-20 
>> 22:29:09.000000000 -0500
>> +++ policy-1.19.4/domains/program/unused/postgresql.te    2004-11-21 
>> 00:17:07.933617789 -0500
>> @@ -110,6 +110,14 @@
>>  dontaudit postgresql_t selinux_config_t:dir { search };
>>  allow postgresql_t mail_spool_t:dir { search };
>>  rw_dir_create_file(postgresql_t, var_lock_t)
>> +can_exec(postgresql_t, { shell_exec_t bin_t } )
>> +ifdef(`httpd.te', `
>> +# +# Allow httpd to work with postgresql
>> +#
>> +allow httpd_t postgresql_tmp_t:sock_file rw_file_perms;
>> +can_unix_connect(httpd_t, posgresql_t)
>> +')
>
>
> shouldn't this be an ifdef on apache.te instead of httpd.te?
>
> bye,
> peter
>
Yes.

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.