Fix contrib/sepgsql test policy to work with latest SELinux releases.
Tom Lane <tgl@sss.pgh.pa.us>
Fix contrib/sepgsql test policy to work with latest SELinux releases. As of Fedora 30, it seems that the system-provided macros for setting up user privileges in SELinux policies don't grant the ability to read /etc/passwd, as they formerly did. This restriction breaks psql (which tries to use getpwuid() to obtain the user name it's running under) and thereby the contrib/sepgsql regression test. Add explicit specifications that we need the right to read /etc/passwd. Mike Palmiotto, per a report from me. Back-patch to all supported branches. Discussion: https://postgr.es/m/23856.1563381159@sss.pgh.pa.us
Files
| Path | Change | +/− |
|---|---|---|
| contrib/sepgsql/sepgsql-regtest.te | modified | +11 −0 |
Discussion
- sepgsql seems rather thoroughly broken on Fedora 30 12 messages · 2019-07-17 → 2019-07-25