PG84 and SELinux
От | James B. Byrne |
---|---|
Тема | PG84 and SELinux |
Дата | |
Msg-id | 47051.216.185.71.25.1291235305.squirrel@webmail.harte-lyne.ca обсуждение исходный текст |
Ответы |
Re: PG84 and SELinux
|
Список | pgsql-general |
OS: CentOS-5.5 Earlier today I attempted to upgrade a production server from 8.1 to 8.4 using the pgdg-84-centos.repo. I say attempted because I could never get it to support ssl connections and as that is a requirement I had to roll back to 8.1. Whatever was the cause of the ssl problem I also encountered a surprising number of SELinux violations. The following details the SELinux settings that I ultimately had to apply as a local module. This took a considerable period of time as each had to be triggered in turn in order that the error be identified. #============= postgresql_t ============== allow postgresql_t var_lib_t:dir rmdir; allow postgresql_t var_lib_t:file { write getattr link read unlink append }; Is this to be expected? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3
В списке pgsql-general по дате отправления: