On Wed, Apr 14, 2021 at 8:42 AM Dave Page <dp...@pgadmin.org> wrote: > Attached is a patch to clean this up. It will log denials as such regardless > of whether or not either selinux or sepgsql is in permissive mode. When > either is in permissive mode, it'll add " permissive=1" to the end of the log > messages. e.g.
Looks superficially reasonable on first glance, but I think we should try to get an opinion from someone who knows more about SELinux. -- Robert Haas EDB: http://www.enterprisedb.com