From ffee877701d0c0bf014d17ee37ae0a36cd281bd0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Timo=20M=E4kinen?= Date: Wed, 6 Oct 2010 16:07:52 +0300 Subject: [PATCH] Fixed SELinux contexts for MySQL data directories. --- mysql/manifests/init.pp | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/mysql/manifests/init.pp b/mysql/manifests/init.pp index 22ae5a4..ca7451f 100644 --- a/mysql/manifests/init.pp +++ b/mysql/manifests/init.pp @@ -29,11 +29,13 @@ class mysql::server { mode => 0755, owner => mysql, group => mysql, + seltype => "mysqld_db_t", require => Package["mysql-server"], } file { "/srv/mysql": ensure => link, target => "${mysql_datadir}", + seltype => "mysqld_db_t", require => File["${mysql_datadir}"], } } else { @@ -42,10 +44,24 @@ class mysql::server { mode => 0755, owner => mysql, group => mysql, + seltype => "mysqld_db_t", require => Package["mysql-server"], } } + if $selinux { + selinux::manage_fcontext { "/srv/mysql(/.*)?": + type => "mysqld_db_t", + before => File["/srv/mysql"], + } + if $mysql_datadir { + selinux::manage_fcontext { "${mysql_datadir}(/.*)?": + type => "mysqld_db_t", + before => File["${mysql_datadir}"], + } + } + } + service { "mysqld": ensure => running, enable => true,