Tom,

I think you may be right. There were some audit access denied messages. I
had SELinux in permissive mode, but its tricky to work with.

I generated a new SELinux rule using audit2allow, here is what it looks like
now. Do you think this is adequate?

Thanks,

Cory

[r...@ittdev1 data]# ls -Z pg_xlog
-rw-------  postgres postgres root:object_r:postgresql_db_t
000000010000000000000000
drwx------  postgres postgres root:object_r:postgresql_db_t
archive_status



> From: Tom Lane <[email protected]>
> Date: Mon, 14 Sep 2009 12:09:48 -0400
> To: Cory Isaacson <[email protected]>
> Cc: <[email protected]>
> Subject: Re: [GENERAL] Checkpoint request failed, permission denied
> 
> Cory Isaacson <[email protected]> writes:
>> Here are the permissions on pg_xlog:
>> drwx------ 3 postgres postgres  4096 Sep 13 22:19 pg_xlog
> 
> Well, that certainly looks right.  I'm back to suspecting selinux ...
> have you tried "ls -Z"?  I'm not totally sure about RHEL5, but in
> recent Fedora it should look like
> 
> drwx------. postgres postgres unconfined_u:object_r:postgresql_db_t:s0 pg_xlog
> 
> the "postgresql_db_t" bit being the actually critical part.
> 
> regards, tom lane



-- 
Sent via pgsql-general mailing list ([email protected])
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general

Reply via email to