PG84 and SELinux - Mailing list pgsql-general

From James B. Byrne
Subject PG84 and SELinux
Date
Msg-id 47051.216.185.71.25.1291235305.squirrel@webmail.harte-lyne.ca
Whole thread Raw
Responses Re: PG84 and SELinux
List pgsql-general
OS: CentOS-5.5

Earlier today I attempted to upgrade a production server from 8.1 to
8.4 using the pgdg-84-centos.repo.  I say attempted because I could
never get it to support ssl connections and as that is a requirement
I had to roll back to 8.1.

Whatever was the cause of the ssl problem I also encountered a
surprising number of SELinux violations.  The following details the
SELinux settings that I ultimately had to apply as a local module.
This took a considerable period of time as each had to be triggered
in turn in order that the error be identified.

#============= postgresql_t ==============
allow postgresql_t var_lib_t:dir rmdir;
allow postgresql_t var_lib_t:file { write getattr link read unlink
append };

Is this to be expected?

--
***          E-Mail is NOT a SECURE channel          ***
James B. Byrne                mailto:ByrneJB@Harte-Lyne.ca
Harte & Lyne Limited          http://www.harte-lyne.ca
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3C3


pgsql-general by date:

Previous
From: "Joshua D. Drake"
Date:
Subject: Re: Does Postgres support bookmarks (tuples ids)?
Next
From: Jens Wilke
Date:
Subject: Re: Warm Standby log filling up with "FATAL: the database system is starting up" entries