[DSE-Dev] Bug#682793: selinux-policy-default: Postgres psql client does not work while in enforcing mode

Fabio Rafael da Rosa fabiorafael.rosa at gmail.com
Wed Jul 25 18:40:14 UTC 2012


Package: selinux-policy-default
Version: 2:0.2.20100524-7+squeeze1
Severity: normal


After installing SE-Linux postgresql psql client stops working. 
What happens is that the policy is tagging the psql executable as 
one of the postgresql daemons , and daemons does not have rights to writting
to the tty. With that, the client is unusable unless you set selinux
to permissive mode.

-- System Information:
Debian Release: 6.0.5
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/1 CPU core)
Locale: LANG=pt_BR.UTF-8, LC_CTYPE=pt_BR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages selinux-policy-default depends on:
ii  libpam-modules        1.1.1-6.1+squeeze1 Pluggable Authentication Modules f
ii  libselinux1           2.0.96-1           SELinux runtime shared libraries
ii  libsepol1             2.0.41-1           SELinux library for manipulating b
ii  policycoreutils       2.0.82-3           SELinux core policy utilities
ii  python                2.6.6-3+squeeze7   interactive high-level object-orie

Versions of packages selinux-policy-default recommends:
ii  checkpolicy              2.0.22-1        SELinux policy compiler
ii  setools                  3.3.6.ds-7.2+b1 tools for Security Enhanced Linux 

Versions of packages selinux-policy-default suggests:
pn  logcheck                      <none>     (no description available)
pn  syslog-summary                <none>     (no description available)

-- no debconf information



More information about the SELinux-devel mailing list