mariadb/support-files/policy/selinux
Julius Goryavsky 0e89e90f42 MDEV-17835: Remove wsrep-sst-method=xtrabackup
The second line of changes related to replacing xtrabackup with
mariabackup:

1) All unnecessary references to xtrabackup are removed from
the documentation, from some comments, from the control files
that are used to prepare the packages.

2) Made corrections of the tests from the galera_3nodes suite
that mentioned xtrabackup or the old (associated with xtrabackup)
version of innobackupex.

3) Fixed flaws in the galera_3nodes mtr suite control scripts,
because of which they could not work with mariabackup.

4) Fixed numerous bugs in the SST scripts and in the mtr test
files (galera_3nodes mtr suite) that prevented the use of Galera
with IPv6 addresses.

5) Fixed flaws in tests for rsync and mysqldump (for galera_3nodes
mtr tests suite). These tests were not performed successfully without
these fixes.

https://jira.mariadb.org/browse/MDEV-17835
2019-01-22 13:28:03 +01:00
..
mariadb-server.fc MDEV-17835: Remove wsrep-sst-method=xtrabackup 2019-01-22 13:28:03 +01:00
mariadb-server.te MDEV-17835: Remove wsrep-sst-method=xtrabackup 2019-01-22 13:28:03 +01:00
mariadb.te
README

Note: The included SELinux policy files can be used for MariaDB Galera cluster.
However, since these policies had been tested for a limited set of scenarios,
it is highly recommended that you run mysqld in "permissive" mode even with
these policies installed and report any denials on mariadb.org/jira.


How to generate and load the policy module of MariaDB Galera cluster ?
  * Generate the SELinux policy module.
    # cd <source>/policy/selinux/
    # make -f /usr/share/selinux/devel/Makefile mariadb-server.pp

  * Load the generated policy module.
    # semodule -i /path/to/mariadb-server.pp

  * Lastly, run the following command to allow tcp/4568 and udp/4567.
    # semanage port -a -t mysqld_port_t -p tcp 4568
    # semanage port -a -t mysqld_port_t -p udp 4567

How to run mysqld in permissve mode ?
  # semanage permissive -a mysqld_t