module tomcat-mysql-hirs 1.0; require { type mysqld_port_t; type tomcat_t; class tcp_socket name_connect; } #============= tomcat_t ============== #!!!! This avc is allowed in the current policy allow tomcat_t mysqld_port_t:tcp_socket name_connect;