Brandon Keepers <brandon (AT) opensoul (DOT) org> writes:
Is SELinux in enforcement mode, and if so does turning it off change
things?

regards, tom lane

---------------------------(end of broadcast)---------------------------
TIP 9: the planner will ignore your desire to choose an index scan if your
joining column's datatypes do not match

Tom Lane wrote:
Should we check for a buggy SELinux and report a meaningful error
message on failure?

--
Bruce Momjian | http://candle.pha.pa.us
pgman (AT) candle (DOT) pha.pa.us | (610) 359-1001
+ If your life is a hard drive, | 13 Roberts Road
+ Christ can be your backup. | Newtown Square, Pennsylvania 19073

---------------------------(end of broadcast)---------------------------
TIP 2: you can get off all lists at once with the unregister command
(send "unregister YourEmailAddressHere" to majordomo (AT) postgresql (DOT) org)

Bruce Momjian <pgman (AT) candle (DOT) pha.pa.us> writes:
How you intend to do that, exactly? The bug is that it won't let you
write on /dev/tty, which puts a pretty severe crimp on *any* reporting.

(This is not as insane as it sounds: it's a reasonable security
restriction for a daemon process. The error in older SELinux policy
files is that they think all the Postgres executables are daemons, not
only the postmaster.)

regards, tom lane

---------------------------(end of broadcast)---------------------------
TIP 8: explain analyze is your friend

--=-zZak6PCbTazF8g4K0+mL
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

On Tue, 2005-06-14 at 13:55 -0400, Tom Lane wrote:
Yup, that was it. If you disable SELinux, everything works. I tried
just commenting out line 732
in /etc/selinux/targeted/contexts/files/file_contexts and that didn't
work. Anyone know how to correct this?

Brandon

--=-zZak6PCbTazF8g4K0+mL
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQBCrzQK56i+58DjJowRAvanAJ9sCY8oInt6kCxvVuEpIZ T/OI02ZACeP7kG
MwqVDHo2OfgpModsF+E30+c=
=TiKv
-----END PGP SIGNATURE-----

--=-zZak6PCbTazF8g4K0+mL--

Tom Lane wrote:
Throw a message to stderr saying something about SELinux.

--
Bruce Momjian | http://candle.pha.pa.us
pgman (AT) candle (DOT) pha.pa.us | (610) 359-1001
+ If your life is a hard drive, | 13 Roberts Road
+ Christ can be your backup. | Newtown Square, Pennsylvania 19073

---------------------------(end of broadcast)---------------------------
TIP 4: Don't 'kill -9' the postmaster

Bruce Momjian <pgman (AT) candle (DOT) pha.pa.us> writes:
Unless stderr is pointing somewhere else than /dev/tty, this will
accomplish exactly zero ... and if it is pointing somewhere else,
then the problem doesn't arise.

regards, tom lane

---------------------------(end of broadcast)---------------------------
TIP 3: if posting/reading through Usenet, please send an appropriate
subscribe-nomail command to majordomo (AT) postgresql (DOT) org so that your
message can get through to the mailing list cleanly

Brandon Keepers <brandon (AT) opensoul (DOT) org> writes:
I don't know very much about SELinux, but I think the stuff under
/etc/selinux is in the nature of "source code", and if you edit it
you have to do something to compile it and then load the compiled
representation into the kernel.

However, the real answer for your problem is to update to a later
version of selinux-policy-targeted. Red Hat fixed this awhile ago...

regards, tom lane

---------------------------(end of broadcast)---------------------------
TIP 1: subscribe and unsubscribe commands go to majordomo (AT) postgresql (DOT) org

* Bruce Momjian <pgman (AT) candle (DOT) pha.pa.us> [140605, 14:00]:
Sorry to interfere
You might be interested to know that there was a complaint about SELinux
blocking OpenOffice too. See ML 'users (AT) openoffice (DOT) org' June 13 'Previously
working OOo ...'
Regards,
Ennio.
--
[Perche' usare Win$ozz (dico io) se ..."anche uno sciocco sa farlo. \\?//
Fa' qualche cosa di cui non sei capace!" (diceva Henry Miller) ] (°|°)
[Why use Win$ozz (I say) if ... "even a fool can do that. )=(
Do something you aren't good at!" (as Henry Miller used to say) ]

---------------------------(end of broadcast)---------------------------
TIP 1: subscribe and unsubscribe commands go to majordomo (AT) postgresql (DOT) org