Postgres and SELinux

Dracula countofdracula at gmail.com
Thu Jan 5 07:36:04 UTC 2006


Using the default selinux configuration (and being in enforcing mode)
running postgres results in a following error messages: Jan 4 16:19:04
app1 kernel: audit(1136387944.487:18): avc: denied { write } for
pid=4922 comm="postmaster" name="[12868]" dev=pipefs ino=12868
scontext=root:system_r:postgresql_t tcontext=root:system_r:unconfined_t
tclass=fifo_file Jan 4 16:19:04 app1 kernel: audit(1136387944.490:19):
avc: denied { read } for pid=4922 comm="postmaster" name="PG_VERSION"
dev=md0 ino=2850822 scontext=root:system_r:postgresql_t
tcontext=user_u:object_r:var_lib_t tclass=file Jan 4 16:19:04 app1
kernel: audit(1136387944.490:20): avc: denied { getattr } for pid=4922
comm="postmaster" name="PG_VERSION" dev=md0 ino=2850822
scontext=root:system_r:postgresql_t tcontext=user_u:object_r:var_lib_t
tclass=file Jan 4 16:19:04 app1 kernel: audit(1136387944.491:21): avc:
denied { write } for pid=4922 comm="postmaster" name="pg_control"
dev=md0 ino=2850829 scontext=root:system_r:postgresql_t
tcontext=user_u:object_r:var_lib_t tclass=file is there any way to make
postgres work with selinux?

Thanks

Regards,

Komal




More information about the redhat-list mailing list