• Tom Lane's avatar
    Fix contrib/sepgsql test policy to work with latest SELinux releases. · f5a4ab23
    Tom Lane authored
    As of Fedora 30, it seems that the system-provided macros for setting
    up user privileges in SELinux policies don't grant the ability to read
    /etc/passwd, as they formerly did.  This restriction breaks psql
    (which tries to use getpwuid() to obtain the user name it's running
    under) and thereby the contrib/sepgsql regression test.  Add explicit
    specifications that we need the right to read /etc/passwd.
    
    Mike Palmiotto, per a report from me.  Back-patch to all supported
    branches.
    
    Discussion: https://postgr.es/m/23856.1563381159@sss.pgh.pa.us
    f5a4ab23
sepgsql-regtest.te 9.33 KB