PG84 and SELinux

Поиск
Список
Период
Сортировка
От James B. Byrne
Тема PG84 and SELinux
Дата
Msg-id 47051.216.185.71.25.1291235305.squirrel@webmail.harte-lyne.ca
обсуждение исходный текст
Ответы Re: PG84 and SELinux  (Tom Lane <tgl@sss.pgh.pa.us>)
Список pgsql-general
OS: CentOS-5.5

Earlier today I attempted to upgrade a production server from 8.1 to
8.4 using the pgdg-84-centos.repo.  I say attempted because I could
never get it to support ssl connections and as that is a requirement
I had to roll back to 8.1.

Whatever was the cause of the ssl problem I also encountered a
surprising number of SELinux violations.  The following details the
SELinux settings that I ultimately had to apply as a local module.
This took a considerable period of time as each had to be triggered
in turn in order that the error be identified.

#============= postgresql_t ==============
allow postgresql_t var_lib_t:dir rmdir;
allow postgresql_t var_lib_t:file { write getattr link read unlink
append };

Is this to be expected?

--
***          E-Mail is NOT a SECURE channel          ***
James B. Byrne                mailto:ByrneJB@Harte-Lyne.ca
Harte & Lyne Limited          http://www.harte-lyne.ca
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3C3


В списке pgsql-general по дате отправления:

Предыдущее
От: "Joshua D. Drake"
Дата:
Сообщение: Re: Does Postgres support bookmarks (tuples ids)?
Следующее
От: Jens Wilke
Дата:
Сообщение: Re: Warm Standby log filling up with "FATAL: the database system is starting up" entries