Skip to content

Commit d39fb26

Browse files
committed
Allow mysqld_t to read and write to the 'memory.pressure' file in cgroup2
-- Note: The original suggestion was: allow mysqld_t cgroup_t:file { read write }; however one should not use a SELinux type from outside of their own SELinux module -- Note from Daniel Black: For clarity MariaDB/server@2323483#diff-ed06407705f2d1088e796ecb0c9592f1928f7b86fa8e48cbbe50f589fce18f3cR801 is the write to describe the PSI event desired from the kernel. ref: https://www.kernel.org/doc/html/latest/accounting/psi.html -- Resolves: RHBZ#2294899 RHBZ#2256002
1 parent a672fbb commit d39fb26

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

mysql.te

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -79,6 +79,10 @@ allow mysqld_t self:udp_socket create_socket_perms;
7979
kernel_read_network_state(mysqld_t)
8080
kernel_read_net_sysctls(mysqld_t)
8181

82+
# Allow mysqld_t to read to memory.pressure in cgroup
83+
fs_read_cgroup_files(mysqld_t)
84+
fs_write_cgroup_files(mysqld_t)
85+
8286
manage_dirs_pattern(mysqld_t, mysqld_db_t, mysqld_db_t)
8387
manage_files_pattern(mysqld_t, mysqld_db_t, mysqld_db_t)
8488
manage_sock_files_pattern(mysqld_t, mysqld_db_t, mysqld_db_t)

0 commit comments

Comments
 (0)