From: Tom Lane <tgl@sss.pgh.pa.us>
To: Joe Conway <mail@joeconway.com>
Cc: Jacob Champion <jacob.champion@enterprisedb.com>
Cc: pgsql-hackers@lists.postgresql.org
Subject: Re: contrib/sepgsql regression tests have been broken for months
Date: Wed, 29 Oct 2025 19:12:26 -0400
Message-ID: <2919479.1761779546@sss.pgh.pa.us> (raw)
In-Reply-To: <66541690-91c2-48e6-9c99-12c9af25012b@joeconway.com>
References: <1613232.1761255361@sss.pgh.pa.us>
<2e327a21-9954-4d05-aa9e-3b7fe926f39f@joeconway.com>
<371f0ee1-8507-46e0-9090-6df2b14f0cd8@joeconway.com>
<081073df-32ff-498c-abeb-2e5590888ad9@joeconway.com>
<CAOYmi+mppi5iSgyVFv007o6YRh-4oFcP=v3Tv4VjGLxT9R7rWA@mail.gmail.com>
<b485587f-c3ea-4089-b526-92dcd1809f6e@joeconway.com>
<66541690-91c2-48e6-9c99-12c9af25012b@joeconway.com>
Joe Conway <mail@joeconway.com> writes:
> Everything < 18 passes.
Hmm ...
> 18 and HEAD get this failure:
> # The SELinux boolean 'sepgsql_regression_test_mode' must be
> # turned on in order to enable the rules necessary to run the
> # regression tests.
> I believe the boolean is flipped in the 17 and below tests by the test
> script. How is that supposed to happen for the tap tests?
I'd be quite astonished if the buildfarm were trying to do anything
that requires root privilege, and even more astonished if it were
succeeding. I think the expectation is that you turned on
sepgsql_regression_test_mode manually before enabling this buildfarm
test. I don't understand how < 18 would be passing if it weren't on,
so the likely bet is that the test_sepgsql script is mistaken about
how it's checking that. Said script does work for me, but maybe
RHEL7's getsebool output is different from later versions?
regards, tom lane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: tgl@sss.pgh.pa.us, mail@joeconway.com, jacob.champion@enterprisedb.com, pgsql-hackers@lists.postgresql.org
Subject: Re: contrib/sepgsql regression tests have been broken for months
In-Reply-To: <2919479.1761779546@sss.pgh.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox