Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705

Picked from: https://github.com/MariaDB/server/blob/11.3/support-files/policy/selinux/mariadb-server.te#L70 https://github.com/MariaDB/server/blob/11.3/support-files/policy/selinux/mariadb-server.te#L71 https://github.com/MariaDB/server/blob/11.3/support-files/policy/selinux/mariadb-server.te#L100
devexp-db · Nov 17, 2023 · de84778 · de84778
1 parent d718485
commit de84778
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/mysql.te b/mysql.te
@@ -76,6 +76,10 @@ allow mysqld_t self:unix_stream_socket create_stream_socket_perms;
 allow mysqld_t self:tcp_socket create_stream_socket_perms;
 allow mysqld_t self:udp_socket create_socket_perms;
 
+allow mysqld_t proc_net_t:file { read getattr open };
+allow mysqld_t sysctl_net_t:dir search;
+allow mysqld_t sysctl_net_t:file { read getattr open };
+
 manage_dirs_pattern(mysqld_t, mysqld_db_t, mysqld_db_t)
 manage_files_pattern(mysqld_t, mysqld_db_t, mysqld_db_t)
 manage_sock_files_pattern(mysqld_t, mysqld_db_t, mysqld_db_t)