search

fedora-selinux / selinux-policy

selinux-policy for Fedora is a large patch off the mainline
GNU General Public License v2.0
156 stars 157 forks source link

Allow postfix_domain connect to postgresql over a unix socket #2154

Closed zpytela closed 3 weeks ago

zpytela commented 4 weeks ago

The commit addresses the following (unrelated) AVC denials: type=AVC msg=audit(08.12.2023 10:41:54.740:21138) : avc: denied { write } for pid=323918 comm=smtpd name=.s.PGSQL.5432 dev="tmpfs" ino=1174 scontext=system_u:system_r:postfix_smtpd_t:s0 tcontext=system_u:object_r:postgresql_var_run_t:s0 tclass=sock_file permissive=0 type=AVC msg=audit(1716541501.113:12346): avc: denied { connectto } for pid=328734 comm="trivial-rewrite" path="/run/postgresql/.s.PGSQL.5432" scontext=system_u:system_r:postfix_master_t:s0 tcontext=system_u:system_r:postgresql_t:s0 tclass=unix_stream_socket permissive=0

Resolves: RHEL-6776

packit-as-a-service[bot] commented 4 weeks ago

Cockpit tests failed for commit 1d54f76e3472238f5725bba19995b6a67dbf90c9. @martinpitt, @jelly, @mvollmer please check.

martinpitt commented 3 weeks ago

Green again.