Re: One question about security label command

From: Adam Brightwell <adam(dot)brightwell(at)crunchydatasolutions(dot)com>
To: Joe Conway <mail(at)joeconway(dot)com>
Cc: Stephen Frost <sfrost(at)snowman(dot)net>, Alvaro Herrera <alvherre(at)2ndquadrant(dot)com>, Kohei KaiGai <kaigai(at)kaigai(dot)gr(dot)jp>, Kouhei Kaigai <kaigai(at)ak(dot)jp(dot)nec(dot)com>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Robert Haas <robertmhaas(at)gmail(dot)com>, 张元超 <zhangyuanchao(at)highgo(dot)com>, "pgsql-hackers(at)postgresql(dot)org" <pgsql-hackers(at)postgresql(dot)org>, adam(dot)brightwell(at)crunchydata(dot)com
Subject: Re: One question about security label command
Date: 2015-08-29 02:21:04
Message-ID: CAKRt6CRmmo1FA_e04GprZy8m-PtcXPhAqUEifFH-4XfZfJzARw@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

> * It is really the version of libselinux.so that matters here. RHEL
> 7.x has libselinux 2.2.x whereas RHEL 6.x has 2.0.x. The latter lacks
> functionality required by sepgsql starting with PG 9.2.

Yes, that has been my observation as well.

> So given all that, here is what I propose we do:
>
> 1.) Commit Kouhei's patch against HEAD and 9.5 (Joe)
> 2.) Commit my modified patch against 9.4 and 9.3 (Joe)
> 3.) Rework patch for 9.2 (Kouhei)
> 4.) Finish standing up the RHEL/CentOS 7.x buildfarm member to
> test sepgsql on 9.2 and up. The animal (rhinoceros) is running
> already, but still needs some custom scripting. (Joe, Andrew)
> 5.) Additionally stand up a RHEL/CentOS 6.x buildfarm member to test
> sepgsql on 9.1 (no changes) (Joe).
>
> Sound like a plan?

I think this makes sense. Getting buildfarm coverage on any level is
better than nothing, IMHO. Kind of a bummer that 9.1 is the only
version that will work as-is on EL6 but it is what it is for now, I
suppose.

-Adam

--
Adam Brightwell - adam(dot)brightwell(at)crunchydatasolutions(dot)com
Database Engineer - www.crunchydatasolutions.com

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Thomas Munro 2015-08-29 02:55:08 Re: NOTIFY in Background Worker
Previous Message Jim Nasby 2015-08-29 02:18:47 Re: Fwd: Core dump with nested CREATE TEMP TABLE