Re: contrib/sepgsql fails on Fedora 28

Mike Palmiotto <mike(dot)palmiotto(at)crunchydata(dot)com> writes:
> On 05/24/2018 03:30 PM, Tom Lane wrote:
>> I tried to run the regression test for sepgsql on F28 (so I could
>> fix the now-obsolete expected-file therein). It fails at this
>> preparatory step:
>> $ sudo semodule -u sepgsql-regtest.pp

> This error appears to be due to an update to the userspace install tools,
> which do the proper `neverallow` check that was previously not happening. It
> appears that at least part of this fix needs to take place in the upstream
> policy repo, but in the meantime I've attached a patch that should stop the
> build errors.

I don't have any immediate need for this fix personally, since sepgsql
still works on F26. The buildfarm is not testing the case either.
So rather than push a band-aid fix that might have a short shelf-life,
I'm inclined to wait till the upstream changes land, then see if we
need to do anything.

regards, tom lane