Le mardi 25 avril 2017 à 11:07 +0200, Robert Moskowitz a écrit : > > On 04/25/2017 10:58 AM, Laurent Wandrebeck wrote: > > Le mardi 25 avril 2017 à 10:39 +0200, Robert Moskowitz a écrit : > >> Thanks Laurent. You obviously know a LOT more about SELinux than I. I > >> pretty much just use commands and not build policies. So I need some > >> more information here. > >> > >> From what you provided below, how do I determine what is currently in > >> place and how do I add your stuff (changing postgresql with mysql, nat.) > >> > >> thanks > > Quick’n’(really) dirty SELinux howto: > > 1) Run the service. fails due to missing selinux policy. > > 2) grep service_pattern /var/log/audit/audit.log | audit2allow -M > > myservice_policy > > Do you really mean 'service_pattern', or is this a placeholder for > something like mysql? > > As I get 'Nothing to do' placeholder which changes according to your needs. -- Laurent Wandrebeck <l.wandrebeck at quelquesmots.fr>