Re: One question about security label command - Mailing list pgsql-hackers

From Adam Brightwell
Subject Re: One question about security label command
Date
Msg-id CAKRt6CQjveL1ouJMqPvdgtuCp4PLcGZpxj6y+nK8Hy9oTq1Ctw@mail.gmail.com
Whole thread Raw
In response to Re: One question about security label command  (Kohei KaiGai <kaigai@kaigai.gr.jp>)
List pgsql-hackers
The attached patch fixes the policy module of regression test.
However, I also think we may stop to rely permission set of pre-defined
selinux domains. Instead of pre-defined one, sepgsql-regtest.te may be
ought to define own domain with appropriate permission set independent
from the base selinux-policy version.

I have applied this patch and ran the tests.  All seems to work except that I have a minor error in the 'label' regression tests.  It is simply a result order issue, modifying the expected order in my environment resolves the issue.  I have attached the 'regression.diffs' for reference as well, FWIW, I have also attached a patch that corrects this issue for me, hopefully it is useful.

-Adam 

--
Attachment

pgsql-hackers by date:

Previous
From: Magnus Hagander
Date:
Subject: Re: Strange assertion using VACOPT_FREEZE in vacuum.c
Next
From: Воронин Дмитрий
Date:
Subject: Question about TEMP tables