Hacker News new | ask | show | jobs
by devicenull 4286 days ago

  Lets look at what it can read.
  ... It can read apache static content, like web page data.
  Well what can't it read?
  user_home_t - This is where I keep my credit card data
  *db_t - No database data.
So, it can't read database data directly, but presumably your website can already connect to the database. Which means it can read out your database credentials, and just connect to the database?