Re: sepgsql logging - Mailing list pgsql-hackers

From Robert Haas
Subject Re: sepgsql logging
Date
Msg-id CA+TgmoZ3jt+OMNwmeMA=9pgmd_e2+GzR7rdaU5oL=YJZ-enPzg@mail.gmail.com
Whole thread Raw
In response to Re: sepgsql logging  (Dave Page <dpage@pgadmin.org>)
Responses Re: sepgsql logging
List pgsql-hackers
On Wed, Apr 14, 2021 at 8:42 AM Dave Page <dpage@pgadmin.org> wrote:
> Attached is a patch to clean this up. It will log denials as such regardless of whether or not either selinux or
sepgsqlis in permissive mode. When either is in permissive mode, it'll add " permissive=1" to the end of the log
messages.e.g.
 

Looks superficially reasonable on first glance, but I think we should
try to get an opinion from someone who knows more about SELinux.

-- 
Robert Haas
EDB: http://www.enterprisedb.com



pgsql-hackers by date:

Previous
From: Robert Haas
Date:
Subject: Re: [PATCH] PREPARE TRANSACTION unexpected behavior with TEMP TABLE
Next
From: Robert Haas
Date:
Subject: Re: Converting contrib SQL functions to new style