On 03/25/2017 05:21 PM, Andres Freund wrote: > On March 25, 2017 4:54:08 PM PDT, Joe Conway <m...@joeconway.com> wrote: >>On 03/25/2017 04:45 PM, Andres Freund wrote: >>> I think, for starters, seeing regression.diffs from sepgsql would be >>> useful. Might already clear up what's the issue. >> >>I went looking, and even after a forced run the diff file is gone -- >>does the buildfarm auto-cleanup or something? > > Yes, it does. You'd probably have to run the tests manually. Do you > have selinux setup? I assumed you would, given I seen to recall a > talk of yours with references to it ;)
Yeah, but those machines are MLS fully constrained, and the sepgsql regression test specifically needs "targeted" and some other particular setup. So the easiest box to run this on is the buildfarm animal, but I also want to do it in a way that doesn't mess up that environment. I found "keep_error_builds" in build-farm.conf and tried setting to 1 and rerunning in force -- that seems to have worked, so diffs attached. Joe -- Crunchy Data - http://crunchydata.com PostgreSQL Support for Secure Enterprises Consulting, Training, & Open Source Development
***
/opt/src/pgsql-git/build-farm-root/HEAD/pgsql.build/contrib/sepgsql/expected/ddl.out
2017-03-25 17:16:52.707097081 -0700
---
/opt/src/pgsql-git/build-farm-root/HEAD/pgsql.build/contrib/sepgsql/results/ddl.out
2017-03-25 17:23:17.811479306 -0700
***************
*** 187,192 ****
--- 187,193 ----
LOG: SELinux: allowed { search }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0
tcontext=system_u:object_r:sepgsql_schema_t:s0 tclass=db_schema
name="pg_catalog"
LOG: SELinux: allowed { search }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0
tcontext=system_u:object_r:sepgsql_schema_t:s0 tclass=db_schema
name="pg_catalog"
LOG: SELinux: allowed { setattr }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0
tcontext=unconfined_u:object_r:sepgsql_table_t:s0 tclass=db_column
name="regtest_schema.regtest_table_4.y"
+ LOG: SELinux: allowed { execute }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0
tcontext=system_u:object_r:sepgsql_proc_exec_t:s0 tclass=db_procedure
name="pg_catalog.float8(integer)"
DROP INDEX regtest_index_tbl4_y;
LOG: SELinux: allowed { remove_name }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0
tcontext=unconfined_u:object_r:sepgsql_schema_t:s0 tclass=db_schema
name="regtest_schema"
LOG: SELinux: allowed { setattr }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0
tcontext=unconfined_u:object_r:sepgsql_table_t:s0 tclass=db_table
name="regtest_schema.regtest_table_4"
======================================================================
***
/opt/src/pgsql-git/build-farm-root/HEAD/pgsql.build/contrib/sepgsql/expected/alter.out
2017-03-25 17:16:52.707097081 -0700
---
/opt/src/pgsql-git/build-farm-root/HEAD/pgsql.build/contrib/sepgsql/results/alter.out
2017-03-25 17:23:21.280482200 -0700
***************
*** 170,177 ****
--- 170,180 ----
LOG: SELinux: allowed { select }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0
tcontext=unconfined_u:object_r:sepgsql_table_t:s0 tclass=db_column name="table
regtest_table column a"
LOG: SELinux: allowed { select }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0
tcontext=unconfined_u:object_r:sepgsql_table_t:s0 tclass=db_table
name="regtest_schema.regtest_table_3"
LOG: SELinux: allowed { select }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0
tcontext=unconfined_u:object_r:sepgsql_table_t:s0 tclass=db_column name="table
regtest_table_3 column x"
+ LOG: SELinux: allowed { execute }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0
tcontext=system_u:object_r:sepgsql_proc_exec_t:s0 tclass=db_procedure
name="pg_catalog.int4eq(integer,integer)"
ALTER TABLE regtest_table ADD CONSTRAINT test_ck CHECK (b like '%abc%') NOT
VALID; -- not supported
ALTER TABLE regtest_table VALIDATE CONSTRAINT test_ck; -- not supported
+ LOG: SELinux: allowed { execute }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0
tcontext=system_u:object_r:sepgsql_proc_exec_t:s0 tclass=db_procedure
name="pg_catalog.textlike(pg_catalog.text,pg_catalog.text)"
+ LOG: SELinux: allowed { execute }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0
tcontext=system_u:object_r:sepgsql_proc_exec_t:s0 tclass=db_procedure
name="pg_catalog.textlike(pg_catalog.text,pg_catalog.text)"
ALTER TABLE regtest_table DROP CONSTRAINT test_ck; -- not supported
CREATE TRIGGER regtest_test_trig BEFORE UPDATE ON regtest_table
FOR EACH ROW EXECUTE PROCEDURE suppress_redundant_updates_trigger();
======================================================================
***
/opt/src/pgsql-git/build-farm-root/HEAD/pgsql.build/contrib/sepgsql/expected/misc.out
2017-03-25 17:16:52.707097081 -0700
---
/opt/src/pgsql-git/build-farm-root/HEAD/pgsql.build/contrib/sepgsql/results/misc.out
2017-03-25 17:23:21.485482371 -0700
***************
*** 46,53 ****
LOG: SELinux: allowed { select }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0-s0:c0.c255
tcontext=unconfined_u:object_r:sepgsql_table_t:s0 tclass=db_table
name="public.t1"
LOG: SELinux: allowed { select }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0-s0:c0.c255
tcontext=unconfined_u:object_r:sepgsql_table_t:s0 tclass=db_column name="table
t1 column x"
LOG: SELinux: allowed { select }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0-s0:c0.c255
tcontext=unconfined_u:object_r:sepgsql_table_t:s0 tclass=db_column name="table
t1 column y"
- LOG: SELinux: allowed { execute }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0-s0:c0.c255
tcontext=system_u:object_r:sepgsql_proc_exec_t:s0 tclass=db_procedure
name="pg_catalog.row_number()"
LOG: SELinux: allowed { execute }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0-s0:c0.c255
tcontext=system_u:object_r:sepgsql_proc_exec_t:s0 tclass=db_procedure
name="pg_catalog.textlike(pg_catalog.text,pg_catalog.text)"
row_number | x | y
------------+----+----------------------------------
1 | 2 | c81e728d9d4c2f636f067f89cc14862c
--- 46,53 ----
LOG: SELinux: allowed { select }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0-s0:c0.c255
tcontext=unconfined_u:object_r:sepgsql_table_t:s0 tclass=db_table
name="public.t1"
LOG: SELinux: allowed { select }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0-s0:c0.c255
tcontext=unconfined_u:object_r:sepgsql_table_t:s0 tclass=db_column name="table
t1 column x"
LOG: SELinux: allowed { select }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0-s0:c0.c255
tcontext=unconfined_u:object_r:sepgsql_table_t:s0 tclass=db_column name="table
t1 column y"
LOG: SELinux: allowed { execute }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0-s0:c0.c255
tcontext=system_u:object_r:sepgsql_proc_exec_t:s0 tclass=db_procedure
name="pg_catalog.textlike(pg_catalog.text,pg_catalog.text)"
+ LOG: SELinux: allowed { execute }
scontext=unconfined_u:unconfined_r:sepgsql_regtest_superuser_t:s0-s0:c0.c255
tcontext=system_u:object_r:sepgsql_proc_exec_t:s0 tclass=db_procedure
name="pg_catalog.row_number()"
row_number | x | y
------------+----+----------------------------------
1 | 2 | c81e728d9d4c2f636f067f89cc14862c
======================================================================
signature.asc
Description: OpenPGP digital signature
