From: Tom Lane <tgl@sss.pgh.pa.us>
To: Joe Conway <mail@joeconway.com>
cc: Jacob Champion <jacob.champion@enterprisedb.com>,
        pgsql-hackers@lists.postgresql.org
Subject: Re: contrib/sepgsql regression tests have been broken for months
In-reply-to: <66541690-91c2-48e6-9c99-12c9af25012b@joeconway.com>
References: <1613232.1761255361@sss.pgh.pa.us>
 <2e327a21-9954-4d05-aa9e-3b7fe926f39f@joeconway.com>
 <371f0ee1-8507-46e0-9090-6df2b14f0cd8@joeconway.com>
 <081073df-32ff-498c-abeb-2e5590888ad9@joeconway.com>
 <CAOYmi+mppi5iSgyVFv007o6YRh-4oFcP=v3Tv4VjGLxT9R7rWA@mail.gmail.com>
 <b485587f-c3ea-4089-b526-92dcd1809f6e@joeconway.com>
 <66541690-91c2-48e6-9c99-12c9af25012b@joeconway.com>
Comments: In-reply-to Joe Conway <mail@joeconway.com>
	message dated "Wed, 29 Oct 2025 18:11:26 -0400"
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <2919478.1761779546.1@sss.pgh.pa.us>
Date: Wed, 29 Oct 2025 19:12:26 -0400
Message-ID: <2919479.1761779546@sss.pgh.pa.us>
Archived-At: 
 <https://www.postgresql.org/message-id/2919479.1761779546%40sss.pgh.pa.us>
Precedence: bulk

Joe Conway <mail@joeconway.com> writes:
> Everything < 18 passes.

Hmm ...

> 18 and HEAD get this failure:

> # The SELinux boolean 'sepgsql_regression_test_mode' must be
> # turned on in order to enable the rules necessary to run the
> # regression tests.

> I believe the boolean is flipped in the 17 and below tests by the test 
> script. How is that supposed to happen for the tap tests?

I'd be quite astonished if the buildfarm were trying to do anything
that requires root privilege, and even more astonished if it were
succeeding.  I think the expectation is that you turned on
sepgsql_regression_test_mode manually before enabling this buildfarm
test.  I don't understand how < 18 would be passing if it weren't on,
so the likely bet is that the test_sepgsql script is mistaken about
how it's checking that.  Said script does work for me, but maybe
RHEL7's getsebool output is different from later versions?

			regards, tom lane