On Wed, Apr 14, 2021 at 8:42 AM Dave Page <dpage(at)pgadmin(dot)org> wrote:
> Attached is a patch to clean this up. It will log denials as such regardless of whether or not either selinux or sepgsql is in permissive mode. When either is in permissive mode, it'll add " permissive=1" to the end of the log messages. e.g.
Looks superficially reasonable on first glance, but I think we should
try to get an opinion from someone who knows more about SELinux.
--
Robert Haas
EDB: http://www.enterprisedb.com