-
Notifications
You must be signed in to change notification settings - Fork 166
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Synchronize with 'mysql-selinux' upstream #2360
base: rawhide
Are you sure you want to change the base?
Synchronize with 'mysql-selinux' upstream #2360
Conversation
…#2221433 rhbz#2245705 I verified the policy compiles successfuly in Fedora before pushing -- Cherry-picked commit: devexp-db/mysql-selinux@a672fbb
…the 'memory.pressure' file in cgroup2 -- Note: The original suggestion was: allow mysqld_t cgroup_t:file { read write }; however one should not use a SELinux type from outside of their own SELinux module -- Note from Daniel Black: For clarity MariaDB/server@2323483#diff-ed06407705f2d1088e796ecb0c9592f1928f7b86fa8e48cbbe50f589fce18f3cR801 is the write to describe the PSI event desired from the kernel. ref: https://www.kernel.org/doc/html/latest/accounting/psi.html -- Resolves: RHBZ#2294899 RHBZ#2256002 -- Cherry-picked commit: devexp-db/mysql-selinux@d39fb26
…sql/mysqlx.sock' Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2186519 -- Cherry-picked commit: devexp-db/mysql-selinux@234de5d
-- Cherry-picked missing piece from commit: devexp-db/mysql-selinux@d4b14cd
Notes only partially related to this commit, but since we are here:
Anyway, we currently consider removing sources of modules like mysql and keep only interface files, mysql.if seems to be synced. |
I've prepared a devexp-db/mysql-selinux#8 based on your feedback. Regarding the
Which IMO makes sense, it offers multiple backup methods, with some making physical backups of the raw DB files, so it needs to be permitted to work with them. |
Together with devexp-db/mysql-selinux#7 it completely synchronizes the content mysql.* files in these two repositories.