In this example, the desired end state is for SELinux to allow httpd
to connect and write to UNIX Stream Sockets (in order for PHP apps to
connect to database via a file socket rather than a TCP socket, as
frequent connections over TCP were exhausting available TCP ports).
CFEngine creates the SEL
On Fri, Sep 21, 2012 at 8:23 AM, wrote:
> Forum: CFEngine Help
> Subject: Managing Booleans
> Author: daveseff
> Link to topic: https://cfengine.com/forum/read.php?3,27478,27478#msg-27478
>
> I need to manage SElinux contexts on my systems. With that, I need to set
> booleans either on or off wi
Situation: I want to target a promise to a certain group of servers.
However I want to
abstract the elements of that group from the promises that target that
group, so that
when I add an element to that group, I only need to update *one*
promise, the one
enumerating that group.
(Let's assume my
