Re: add a MAC check for TRUNCATE

Joe Conway <mail@joeconway.com> writes:
> On 9/6/19 2:18 PM, Tom Lane wrote:
>> sepgsql hasn't worked on RHEL6 in a long time, if ever; it requires
>> a newer version of libselinux than what ships in RHEL6.  So I'm not
>> concerned about that.  We do need to worry about RHEL7, and whatever
>> is the oldest version of Fedora that is running the sepgsql tests
>> in the buildfarm.

> I could be wrong, but as far as I know rhinoceros is the only buildfarm
> animal running sepgsql tests.

It seems reasonable to define RHEL7 as the oldest SELinux version we
still care about.  But it'd be a good idea for somebody to be running
a fairly bleeding-edge Fedora animal with sepgsql enabled, so we get
coverage of the other end of the scale.

            regards, tom lane