Re: Fixing denials

--===============5993581185247426710==
Content-Type: multipart/signed; micalg=pgp-sha256;
	protocol="application/pgp-signature"; boundary="ku3ZpXlCfiHSDQNH"
Content-Disposition: inline


--ku3ZpXlCfiHSDQNH
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

justina colmena ~biz via selinux wrote:
> And there are more booleans that are quite specific to
> postgresql. Maybe I should try the
> "selinuxuser_postgresql_connect_enabled" boolean.
>=20
> [root@blanco ~]# getsebool -a|grep postgres
> postgresql_can_rsync --> off
> postgresql_selinux_transmit_client_label --> off
> postgresql_selinux_unconfined_dbadm --> on
> postgresql_selinux_users_ddl --> on
> selinuxuser_postgresql_connect_enabled --> off
> [root@blanco ~]#=20
>=20
> And a really old man page which I can't find installed on
> the system.
>=20
> https://mgrepl.fedorapeople.org/man_selinux/Fedora18/postgresql.html

If you install selinux-policy-doc then you should have
postgresql_selinux(8) (as well as many other
<service>_selinux man pages).  Those can be quite useful.

--=20
Todd

--ku3ZpXlCfiHSDQNH
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQSvlwC4tRNlCF6x+moHOcdGE+n45gUCZ4UucAAKCRAHOcdGE+n4
5tjPAQCre/nz2L37O+FhQnnQ3B76laEw5ICNYCBOKtqSfPIcswD/aIC02XknDXJo
av4sGbAEbZ7ndBERq2p/KZb6itk0fg8=
=MxTh
-----END PGP SIGNATURE-----

--ku3ZpXlCfiHSDQNH--

--===============5993581185247426710==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline
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=

--===============5993581185247426710==--