Re: Cannot get postgres started on Fedora core 3

"Mark Travis" <marktrav@bellsouth.net> writes:
> Tom, I owe you bigtime. That was exactly the problem. I would remove selinux
> from my machine if I wasn't worried that it wasn't actually protecting me
> from the outside world. I had problems installing OpenGroupware as well with
> selinux, but I thought I had them resolved. I bet it got overwritten on an
> update cycle.

selinux is definitely still a work-in-progress.  I think eventually it
will be a great security tool, but right now it's a real PITA to work
with --- they're a long way from having all the rough edges filed down,
in terms of writing a policy that will allow standard daemons to do
what they've traditionally done.  I have to take some of the blame here,
because I should have done more testing while FC3 was still internal to
Red Hat.  I did not realize how invasive selinux really is :-(

            regards, tom lane