Bug 725585 - postgres-8 fails to function properly if SELinux is enabled
Summary: postgres-8 fails to function properly if SELinux is enabled
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: selinux-policy
Version: 6.2
Hardware: Unspecified
OS: Unspecified
low
low
Target Milestone: rc
: ---
Assignee: Miroslav Grepl
QA Contact: BaseOS QE Security Team
URL:
Whiteboard:
Depends On:
Blocks: 756082
TreeView+ depends on / blocked
 
Reported: 2011-07-25 22:07 UTC by Chris Feist
Modified: 2011-12-23 18:25 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-12-09 09:33:21 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description Chris Feist 2011-07-25 22:07:04 UTC 
Description of problem:
When using postgres-8 SELinux avc denials occur.

Version-Release number of selected component (if applicable):
resource-agents-3.9.2-2.el6

How reproducible:
All the time

Steps to Reproduce:
1. Setup a cluster with postgres-8
2. Start cluster
3. Fail
  
AVC Error is here:
type=AVC msg=audit(1311631300.325:62): avc:  denied  { search } for  pid=4256 comm="postmaster" name="postgres-8" dev=dm-0 ino=392450 scontext=system_u:system_r:postgresql_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir

I believe the issue is caused by postmaster (running as postgres user) attempting to write a pid file in /var/run/cluster/postgres-8

It creates the pid file, but nothing is written in it.
Comment 2 Miroslav Grepl 2011-12-02 14:20:03 UTC 
Does

# restorecon -R -v /var/run/cluster

solve the issue?
Comment 3 Miroslav Grepl 2011-12-09 09:33:21 UTC 
Please reopen the bug if the problem still persists.
Note You need to log in before you can comment on or make changes to this bug.