Re: sepgsql logging

From: Robert Haas <robertmhaas(at)gmail(dot)com>
To: Dave Page <dpage(at)pgadmin(dot)org>
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Andrew Dunstan <andrew(at)dunslane(dot)net>, pgsql-hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: sepgsql logging
Date: 2021-04-14 13:49:09
Message-ID: CA+TgmoZ3jt+OMNwmeMA=9pgmd_e2+GzR7rdaU5oL=YJZ-enPzg@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Wed, Apr 14, 2021 at 8:42 AM Dave Page <dpage(at)pgadmin(dot)org> wrote:
> Attached is a patch to clean this up. It will log denials as such regardless of whether or not either selinux or sepgsql is in permissive mode. When either is in permissive mode, it'll add " permissive=1" to the end of the log messages. e.g.

Looks superficially reasonable on first glance, but I think we should
try to get an opinion from someone who knows more about SELinux.

--
Robert Haas
EDB: http://www.enterprisedb.com

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Robert Haas 2021-04-14 13:55:56 Re: Converting contrib SQL functions to new style
Previous Message Robert Haas 2021-04-14 13:46:43 Re: [PATCH] PREPARE TRANSACTION unexpected behavior with TEMP TABLE