pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  
help / color / mirror / Atom feed
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Graham Leggett <minfrin@sharp.fm>
Cc: pgsql-admin@postgresql.org
Subject: Re: Could not create a tablespace - permission denied
Date: Sat, 19 Apr 2008 11:34:01 -0400
Message-ID: <9189.1208619241@sss.pgh.pa.us> (raw)
In-Reply-To: <4809EC7B.6060902@sharp.fm>
References: <4809EC7B.6060902@sharp.fm>

Graham Leggett <minfrin@sharp.fm> writes:
> While attempting to create a tablespace as the postgres user under RHEL5 
> with *no* SELinux enabled, I get the following error:

> postgres=# CREATE TABLESPACE fma LOCATION '/home/chandler/fma/db/pgsql';
> ERROR:  could not set permissions on directory 
> "/home/chandler/fma/db/pgsql": Permission denied

> The user postgres is able to access the directory, and the user postgres 
> is able to set permissions on the directory to 0700:

> -bash-3.1$ chmod 700 /home/chandler/fma/db/pgsql

If you can do that from a shell running as postgres, then I think
selinux is not so disabled as you think.  Ordinary file permissions are
applied uniformly to all processes running as a given userid, but
selinux is different.

			regards, tom lane



view thread (10+ messages)  latest in thread

Message-ID: <9189.1208619241@sss.pgh.pa.us>
Permalink:  ../9189.1208619241@sss.pgh.pa.us/
Also on:    postgresql.org/message-id/9189.1208619241@sss.pgh.pa.us

 · 

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-admin@postgresql.org
  Cc: tgl@sss.pgh.pa.us, minfrin@sharp.fm
  Subject: Re: Could not create a tablespace - permission denied
  In-Reply-To: <9189.1208619241@sss.pgh.pa.us>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox