2nd attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705

I verified the policy compiles successfuly in Fedora before pushing
devexp-db · Nov 18, 2023 · a672fbb · a672fbb
1 parent 2d5769f
commit a672fbb
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/mysql.te b/mysql.te
@@ -76,6 +76,9 @@ allow mysqld_t self:unix_stream_socket create_stream_socket_perms;
 allow mysqld_t self:tcp_socket create_stream_socket_perms;
 allow mysqld_t self:udp_socket create_socket_perms;
 
+kernel_read_network_state(mysqld_t)
+kernel_read_net_sysctls(mysqld_t)
+
 manage_dirs_pattern(mysqld_t, mysqld_db_t, mysqld_db_t)
 manage_files_pattern(mysqld_t, mysqld_db_t, mysqld_db_t)
 manage_sock_files_pattern(mysqld_t, mysqld_db_t, mysqld_db_t)