Re: add a MAC check for TRUNCATE - Mailing list pgsql-hackers

From Joe Conway
Subject Re: add a MAC check for TRUNCATE
Date
Msg-id a9b613cc-b3a6-9ec7-a3cc-136355df7ee0@joeconway.com
Whole thread Raw
In response to Re: add a MAC check for TRUNCATE  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: add a MAC check for TRUNCATE
List pgsql-hackers
On 9/6/19 8:07 PM, Tom Lane wrote:
> Joe Conway <mail@joeconway.com> writes:
>> On 9/6/19 2:18 PM, Tom Lane wrote:
>>> sepgsql hasn't worked on RHEL6 in a long time, if ever; it requires
>>> a newer version of libselinux than what ships in RHEL6.  So I'm not
>>> concerned about that.  We do need to worry about RHEL7, and whatever
>>> is the oldest version of Fedora that is running the sepgsql tests
>>> in the buildfarm.
> 
>> I could be wrong, but as far as I know rhinoceros is the only buildfarm
>> animal running sepgsql tests.
> 
> It seems reasonable to define RHEL7 as the oldest SELinux version we
> still care about.  But it'd be a good idea for somebody to be running
> a fairly bleeding-edge Fedora animal with sepgsql enabled, so we get
> coverage of the other end of the scale.


Yeah -- I was planning to eventually register a RHEL8 animal, but I
should probably do one for Fedora as well. I'll bump the priority for
that on my personal TODO.

Joe
-- 
Crunchy Data - http://crunchydata.com
PostgreSQL Support for Secure Enterprises
Consulting, Training, & Open Source Development



pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: add a MAC check for TRUNCATE
Next
From: Peter Geoghegan
Date:
Subject: Re: amcheck verification for GiST