Hi,
On 2023-04-07 17:46:33 -0400, Tom Lane wrote:
> Andres Freund <[email protected]> writes:
> > On 2023-04-07 23:11:55 +0200, Alvaro Herrera wrote:
> >> Ah, cool, no worries. I would have stopped indeed, but I had to stay
> >> around in case of any test failures.
>
> > Looks like there's work for you if you want ;)
> > https://buildfarm.postgresql.org/cgi-bin/show_log.pl?nm=rhinoceros&dt=2023-04-07%2018%3A52%3A13
>
> > But IMO fixing sepgsql can easily wait till tomorrow.
>
> I can deal with that one -- it's a bit annoying to work with sepgsql
> if you're not on a Red Hat platform.
Indeed. I tried to get them running a while back, to enable the tests with
meson, without lot of success. Then I realized that they're also not wired up
in make... ;)
> After quickly eyeing the diffs, I'm just going to take the new output
> as good. I'm not surprised that there are additional output messages
> given the additional catalog entries this made. I *am* a bit surprised
> that some messages seem to have disappeared --- are there places where
> this resulted in fewer catalog accesses than before? Nonetheless,
> there's no good reason to assume this test is exposing any bugs.
I wonder if the issue is that the new paths miss a hook invocation.
@@ -160,11 +160,7 @@
ALTER TABLE regtest_table ALTER b SET DEFAULT 'XYZ'; -- not supported yet
ALTER TABLE regtest_table ALTER b DROP DEFAULT; -- not supported yet
ALTER TABLE regtest_table ALTER b SET NOT NULL;
-LOG: SELinux: allowed { setattr }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0
tcontext=unconfined_u:object_r:sepgsql_table_t:s0 tclass=db_column
name="regtest_schema_2.regtest_table.b" permissive=0
-LOG: SELinux: allowed { setattr }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0
tcontext=unconfined_u:object_r:sepgsql_table_t:s0 tclass=db_column
name="regtest_schema.regtest_table_2.b" permissive=0
ALTER TABLE regtest_table ALTER b DROP NOT NULL;
-LOG: SELinux: allowed { setattr }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0
tcontext=unconfined_u:object_r:sepgsql_table_t:s0 tclass=db_column
name="regtest_schema_2.regtest_table.b" permissive=0
-LOG: SELinux: allowed { setattr }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0
tcontext=unconfined_u:object_r:sepgsql_table_t:s0 tclass=db_column
name="regtest_schema.regtest_table_2.b" permissive=0
ALTER TABLE regtest_table ALTER b SET STATISTICS -1;
LOG: SELinux: allowed { setattr }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0
tcontext=unconfined_u:object_r:sepgsql_table_t:s0 tclass=db_column
name="regtest_schema_2.regtest_table.b" permissive=0
LOG: SELinux: allowed { setattr }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0
tcontext=unconfined_u:object_r:sepgsql_table_t:s0 tclass=db_column
name="regtest_schema.regtest_table_2.b" permissive=0
The 'not supported yet' cases don't emit messages. Previously SET NOT NULL
wasn't among that set, but seemingly it now is.
Greetings,
Andres Freund
