Received: from malur.postgresql.org ([217.196.149.56])
	by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256)
	(Exim 4.89)
	(envelope-from <pgsql-hackers-owner+archive@lists.postgresql.org>)
	id 1hoJEI-0005DC-DR
	for pgsql-hackers@arkaria.postgresql.org; Fri, 19 Jul 2019 03:06:42 +0000
Received: from localhost ([127.0.0.1] helo=malur.postgresql.org)
	by malur.postgresql.org with esmtp (Exim 4.89)
	(envelope-from <pgsql-hackers-owner+archive@lists.postgresql.org>)
	id 1hoJEH-0006l9-7L
	for pgsql-hackers@arkaria.postgresql.org; Fri, 19 Jul 2019 03:06:41 +0000
Received: from makus.postgresql.org ([2001:4800:3e1:1::229])
	by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256)
	(Exim 4.89)
	(envelope-from <tgl@sss.pgh.pa.us>)
	id 1hoJEG-0006em-Pf
	for pgsql-hackers@lists.postgresql.org; Fri, 19 Jul 2019 03:06:40 +0000
Received: from sss.pgh.pa.us ([66.207.139.130])
	by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256)
	(Exim 4.92)
	(envelope-from <tgl@sss.pgh.pa.us>)
	id 1hoJEE-0007gT-BY
	for pgsql-hackers@lists.postgresql.org; Fri, 19 Jul 2019 03:06:39 +0000
Received: from sss1.sss.pgh.pa.us (localhost [127.0.0.1])
	by sss.pgh.pa.us (8.14.4/8.14.4) with ESMTP id x6J36V5c029577;
	Thu, 18 Jul 2019 23:06:31 -0400
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Mike Palmiotto <mike.palmiotto@crunchydata.com>
cc: pgsql-hackers@lists.postgresql.org, Joe Conway <mail@joeconway.com>
Subject: Re: sepgsql seems rather thoroughly broken on Fedora 30
In-reply-to: 
 <CAMN686Ew55FmGAZMsin_r2GKOpTwNwGS2PJ2v+KX8jO2yU3Sqw@mail.gmail.com>
References: <23856.1563381159@sss.pgh.pa.us>
 <CAMN686Ew55FmGAZMsin_r2GKOpTwNwGS2PJ2v+KX8jO2yU3Sqw@mail.gmail.com>
Comments: In-reply-to Mike Palmiotto <mike.palmiotto@crunchydata.com>
	message dated "Thu, 18 Jul 2019 19:23:08 -0400"
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <29575.1563505591.1@sss.pgh.pa.us>
Date: Thu, 18 Jul 2019 23:06:31 -0400
Message-ID: <29576.1563505591@sss.pgh.pa.us>
List-Id: <pgsql-hackers.lists.postgresql.org>
List-Help: <https://lists.postgresql.org/manage/>
List-Subscribe: <https://lists.postgresql.org/manage/>
List-Post: <mailto:pgsql-hackers@lists.postgresql.org>
List-Owner: <mailto:pgsql-hackers-owner@lists.postgresql.org>
List-Archive: <https://www.postgresql.org/list/pgsql-hackers>
Precedence: bulk

Mike Palmiotto <mike.palmiotto@crunchydata.com> writes:
> On Wed, Jul 17, 2019 at 12:32 PM Tom Lane <tgl@sss.pgh.pa.us> wrote:
>> $ runcon -t sepgsql_regtest_user_t psql --help
>> psql: fatal: could not look up effective user ID 1000: user does not exist

> I wonder what your password file is labeled. It ought to be:
> % ls -Z /etc/passwd
> system_u:object_r:passwd_file_t:s0 /etc/passwd

Good thought, but no cigar:

$ ls -Z /etc/passwd
system_u:object_r:passwd_file_t:s0 /etc/passwd

Happy to poke at anything else you can suggest.

			regards, tom lane