Re: add a MAC check for TRUNCATE - Mailing list pgsql-hackers

From Tom Lane
Subject Re: add a MAC check for TRUNCATE
Date
Msg-id 23163.1567814847@sss.pgh.pa.us
Whole thread Raw
In response to Re: add a MAC check for TRUNCATE  (Joe Conway <mail@joeconway.com>)
Responses Re: add a MAC check for TRUNCATE
List pgsql-hackers
Joe Conway <mail@joeconway.com> writes:
> On 9/6/19 2:18 PM, Tom Lane wrote:
>> sepgsql hasn't worked on RHEL6 in a long time, if ever; it requires
>> a newer version of libselinux than what ships in RHEL6.  So I'm not
>> concerned about that.  We do need to worry about RHEL7, and whatever
>> is the oldest version of Fedora that is running the sepgsql tests
>> in the buildfarm.

> I could be wrong, but as far as I know rhinoceros is the only buildfarm
> animal running sepgsql tests.

It seems reasonable to define RHEL7 as the oldest SELinux version we
still care about.  But it'd be a good idea for somebody to be running
a fairly bleeding-edge Fedora animal with sepgsql enabled, so we get
coverage of the other end of the scale.

            regards, tom lane



pgsql-hackers by date:

Previous
From: Peter Geoghegan
Date:
Subject: Re: amcheck verification for GiST
Next
From: Joe Conway
Date:
Subject: Re: add a MAC check for TRUNCATE