Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Synchronize with 'mysql-selinux' upstream #2360

Open
wants to merge 5 commits into
base: rawhide
Choose a base branch
from
Open

Synchronize with 'mysql-selinux' upstream #2360

wants to merge 5 commits into from

Commits on Sep 24, 2024

  1. [1/5][sync from 'mysql-selinux'] Allow 'mysqld' to use '/usr/bin/host… 

    …name'

Resolves:
  https://bugzilla.redhat.com/show_bug.cgi?id=2089664
  https://bugzilla.redhat.com/show_bug.cgi?id=2073386

--

Cherry-picked commit:
  devexp-db/mysql-selinux@45d5f31
    @FaramosCZ
    FaramosCZ committed Sep 24, 2024
    Configuration menu
    Copy the full SHA
    2fec644 View commit details
    Browse the repository at this point in the history

  2. [2/5][sync from 'mysql-selinux'] 2nd attempt to fix rhbz#2186996 rhbz… 

    …#2221433 rhbz#2245705

I verified the policy compiles successfuly in Fedora before pushing

--

Cherry-picked commit:
  devexp-db/mysql-selinux@a672fbb
    @FaramosCZ
    FaramosCZ committed Sep 24, 2024
    Configuration menu
    Copy the full SHA
    5ee9518 View commit details
    Browse the repository at this point in the history

  3. [3/5][sync from 'mysql-selinux'] Allow mysqld_t to read and write to … 

    …the 'memory.pressure' file in cgroup2

--

Note:
The original suggestion was:
  allow mysqld_t cgroup_t:file { read write };
however one should not use a SELinux type from outside of their own SELinux module

--

Note from Daniel Black:
For clarity
  MariaDB/server@2323483#diff-ed06407705f2d1088e796ecb0c9592f1928f7b86fa8e48cbbe50f589fce18f3cR801
is the write to describe the PSI event desired from the kernel.
ref: https://www.kernel.org/doc/html/latest/accounting/psi.html

--

Resolves: RHBZ#2294899 RHBZ#2256002

--

Cherry-picked commit:
  devexp-db/mysql-selinux@d39fb26
    @FaramosCZ
    FaramosCZ committed Sep 24, 2024
    Configuration menu
    Copy the full SHA
    8e398db View commit details
    Browse the repository at this point in the history

  4. [4/5][sync from 'mysql-selinux'] Fix regex to also match '/var/lib/my… 

    …sql/mysqlx.sock'

Resolves:
  https://bugzilla.redhat.com/show_bug.cgi?id=2186519

--

Cherry-picked commit:
  devexp-db/mysql-selinux@234de5d
    @adobes1 @FaramosCZ
    adobes1 authored and FaramosCZ committed Sep 24, 2024
    Configuration menu
    Copy the full SHA
    69d38ca View commit details
    Browse the repository at this point in the history

  5. [5/5][sync from 'mysql-selinux'] Add mariadb-backup 

    --

Cherry-picked missing piece from commit:
  devexp-db/mysql-selinux@d4b14cd
    @FaramosCZ
    FaramosCZ committed Sep 24, 2024
    Configuration menu
    Copy the full SHA
    43091a6 View commit details
    Browse the repository at this point in the history