[ale] SElinux, Fedora3, and postgresql

[kaboom at gatech.edu (Chris Ricker)]

On Fri, 26 Nov 2004, James P. Kinney III wrote:

> What a combination. My head hurts.
> 
> I would _like_ to keep the selinux turned on but I can't get the policy
> set right to allow access to the postgresql socket from a cgi script.=20
> 
> Google turns up no specific data on postgresql (other than Gentoo has a
> million setups that don't work with Selinux). The Selinux site on NSA
> covers up through FC2. Fedors mailing list has no info on Postgresql.
> 
> Any security gurus schlogging their way through SELinux and has some
> wisdom to share?

What point are you at? Getting avc: denied errors? Are you running strict or 
targeted policy?

later,
chris