Your message dated Thu, 06 Feb 2014 15:19:47 +0000
with message-id <[email protected]>
and subject line Bug#737661: fixed in postgresql-common 153
has caused the Debian Bug report #737661,
regarding postgresql-common: unix domain socket cannot be created when running 
SELinux
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
737661: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737661
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: postgresql-common
Version: 134wheezy4
Severity: important
Tags: patch

Dear Maintainer,

when trying to start postgresql with SELinux active
in enforcing mode the creation of a unix domain socket
in /run/postgresql fails. 
The reason for this problem is that the context of 
/var/run/postgresql is not restored after its new
creation in the startup script at 
/usr/share/postgresql-common/init.d-functions. 
As a consequence it stays labeled with var_run_t
although it has to be labeled postgresql_var_run_t.

The problem can be fixed by calling restorecon after the
creation of the directory. The implementation in the 
attached patch does not affect systems with SELinux
disabled but fixes the problem on systems with active
SELinux.

-- System Information:
Debian Release: 7.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages postgresql-common depends on:
ii  adduser                   3.113+nmu3
ii  debconf [debconf-2.0]     1.5.49
ii  logrotate                 3.8.1-4
ii  lsb-base                  4.1+Debian8+deb7u1
ii  postgresql-client-common  134wheezy4
ii  procps                    1:3.3.3-3
ii  ssl-cert                  1.0.32

postgresql-common recommends no packages.

postgresql-common suggests no packages.

-- debconf information excluded
--- init.d-functions	2012-10-08 10:06:34.000000000 +0200
+++ init.d-functions.fixed	2014-02-04 21:18:42.314620005 +0100
@@ -53,7 +53,8 @@
     if [ -d /var/run/postgresql ]; then
         chmod 2775 /var/run/postgresql
     else
-	install -d -m 2775 -o postgres -g postgres /var/run/postgresql
+        install -d -m 2775 -o postgres -g postgres /var/run/postgresql
+        [ -x /sbin/restorecon ] && restorecon -R /var/run/postgresql
     fi
 
     do_ctl_all start "$1" "Starting PostgreSQL $1 database server"

--- End Message ---
--- Begin Message ---
Source: postgresql-common
Source-Version: 153

We believe that the bug you reported is fixed in the latest version of
postgresql-common, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Christoph Berg <[email protected]> (supplier of updated 
postgresql-common package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Thu, 06 Feb 2014 15:21:00 +0100
Source: postgresql-common
Binary: postgresql-common postgresql-client-common postgresql-server-dev-all 
postgresql postgresql-client postgresql-doc postgresql-contrib
Architecture: source all
Version: 153
Distribution: unstable
Urgency: medium
Maintainer: Debian PostgreSQL Maintainers 
<[email protected]>
Changed-By: Christoph Berg <[email protected]>
Description: 
 postgresql - object-relational SQL database (supported version)
 postgresql-client - front-end programs for PostgreSQL (supported version)
 postgresql-client-common - manager for multiple PostgreSQL client versions
 postgresql-common - PostgreSQL database-cluster manager
 postgresql-contrib - additional facilities for PostgreSQL (supported version)
 postgresql-doc - documentation for the PostgreSQL database management system
 postgresql-server-dev-all - extension build tool for multiple PostgreSQL 
versions
Closes: 737661
Changes: 
 postgresql-common (153) unstable; urgency=medium
 .
   [ Christoph Berg ]
   * Replace the static logrotate configuration by generating the file
     dynamically using ucf, triggered by watching /usr/sbin/logrotate.
     This eases dist-upgrades that upgrade logrotate to >= 3.8 from an older
     version (squeeze->wheezy, precise->trusty).
   * postgresql-common.postinst: Stop debconf later so ucf can use it.
   * postgresql-common.postinst: Call su without - to avoid a warning.
   * t/003_package_checks.t: Add test case for logrotate.
   * pg_createcluster, t/001_packages.t: Refactor the ssl cert test, and add
     matching testcases in the testsuite.
   * t/020_create_sql_remove.t: Make pipe writes unbuffered.
   * pg_buildext: Document the loop action (present since version 141).
   * pg_buildext: Add "installcheck" action for use with autopkgtest.
   * pg_buildext: Support $action-$version when the loop is contained in the
     calling script. (Mostly useful for installcheck-x.y.)
   * postgresql-server-dev-all: Add "make" to depends because pg_buildext is
     mostly useless without it; extensions using autopkgtest would otherwise
     need to include it in their debian/tests/control files.
   * pgxs_debian_control.mk: Add "clean: debian/control" and
     ".PHONY: debian/control".
   * pg_virtualenv: Fix exit code shown with -s.
   * pg_createcluster, pg_virtualenv: -o will set postgresql.conf parameters.
   * postgresql-common: In /usr/share/postgresql-common/pgdg/,
     install apt.postgresql.org.sh to enable activating the pgdg repository.
 .
   [ Martin Pitt ]
   * testsuite, pg_virtualenv: Don't fail if ifconfig is not installed. We
     don't require it as a dependency, and this breaks e. g. autopkgtests in
     minimal environments.
   * t/150_tsearch_stemming.t: Add tests for stemming/searching with non-ASCII
     characters. (See #689997)
   * debian/postgresql-common.triggers: Also trigger on
     /usr/share/postgresql/, so that installation of new server versions builds
     the corresponding dictionaries.
   * init.d-functions, start(): Update SELinux label of /run/postgresql if
     restorecon is installed. Thanks Martin Lang! (Closes: #737661)
Checksums-Sha1: 
 36c6263d97b222b9b68e378a36e6d5cf0f096015 2134 postgresql-common_153.dsc
 6991436a4930aceb8f61d33a27b49541b84dfab2 135908 postgresql-common_153.tar.xz
 0a747b6f49a6aa82ad5434d27dec43b4554180fb 55548 
postgresql-server-dev-all_153_all.deb
 eb6fa46c3ec86ac8a3f09a4bf67c516ca0fcf0ae 48894 postgresql_9.3+153_all.deb
 bdaeefe8a31e8d00f1d3d9633dc368a2202f10c1 48910 
postgresql-client_9.3+153_all.deb
 adac6e649dafbdefde90fbaa31d78fa1870e6fbf 48906 postgresql-doc_9.3+153_all.deb
 62306e6d5d6a3281ed7c92bdbde290a9b87f7463 48914 
postgresql-contrib_9.3+153_all.deb
 acf7c9251b6d3a2120baa7a4afc0b4514690e864 152490 postgresql-common_153_all.deb
 a7bc82bb2f333448ac81ad55bc8ffb74e308475c 69002 
postgresql-client-common_153_all.deb
Checksums-Sha256: 
 e2a303f833f54a4551b754c535c63784fa7e27683d231a8e066ebd2dcb0815d6 2134 
postgresql-common_153.dsc
 ad4341eb3e016c93ac0df0cdb6c5381021c8f92f092513170afba770aabc54d5 135908 
postgresql-common_153.tar.xz
 4746de7effc023820d3b925c265aa7ebf93bbd75ce4e845386ba1ac916b29620 55548 
postgresql-server-dev-all_153_all.deb
 ddda2aa9aaf37a8fda302fc9d3645b3b80463d78c5bd43341afc3f0223ecdc4d 48894 
postgresql_9.3+153_all.deb
 136f3946d3951b3815ccbb9b979240e41243de6b724b7b6528668897dfff1c68 48910 
postgresql-client_9.3+153_all.deb
 bd429448849b7c15369355901baaed6776ca3374fab238750b931370e22f1abd 48906 
postgresql-doc_9.3+153_all.deb
 c8874b38ab7e2b0881c4b96f96753db9e0c2abb3373abccb99968aee7190e9a2 48914 
postgresql-contrib_9.3+153_all.deb
 42300ca14f903ae5bab4f98cc996d9af494444a9f9ccd18a7eeaa2e28421f459 152490 
postgresql-common_153_all.deb
 4066e5e801c7561124f213dd52d5a156f0c7b3bbbccb266be31f63b693699be5 69002 
postgresql-client-common_153_all.deb
Files: 
 60d2525951315efef727154189dfea7b 2134 database optional 
postgresql-common_153.dsc
 de0ab2b84192fef43512860a57f2e620 135908 database optional 
postgresql-common_153.tar.xz
 478560d9703920b25c5ec345f1a880d5 55548 database optional 
postgresql-server-dev-all_153_all.deb
 031e7265d5c0a8db914a3a683dd22c41 48894 database optional 
postgresql_9.3+153_all.deb
 c74efbc28da66742afc84de1595a185d 48910 database optional 
postgresql-client_9.3+153_all.deb
 746ad2fa5b7d6297d31957b659365110 48906 doc optional 
postgresql-doc_9.3+153_all.deb
 f91a38ddaaaa920cbe45c83b9c433c43 48914 database optional 
postgresql-contrib_9.3+153_all.deb
 e414afef53c86416ed2f6dcfdb583782 152490 database optional 
postgresql-common_153_all.deb
 574237e6cc0a6ede5ee2eae9b00dcb14 69002 database optional 
postgresql-client-common_153_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBCAAGBQJS85s5AAoJEExaa6sS0qeuDOMP/2B0CPB+k8h34V0XVjXUWp4x
xKiCObi0I1qhVXGE+fbHe/NVmZb/CcUI7n8FL6yUljJWs/IsjME6Ii6RBv4z7U7M
kq2F6zO3tWoJQFERDaDgrVd1ZNs4S3nf/Noschy7v+DVKI/ngdEv40US8hL+aSkz
4F1jEnzq9nF2Al/yOt3mrJHM83k5vLkBz1IkjG8smPkbOBOP1obBwCBZAHPhxMHb
OOx1p+9V2dEpoG7q+7hrK8ilwpzO9wBM8pp/+9pa4MZDLP7ob8AUbbkvdd6vndOZ
SM1dgTnw94OnLoiQcvRHM1xvEmVThBmCtiBpH/H/PJZHTvgpJr/QR4x/L+mXIFEw
Fmbvvs0Ru4iPCKMLg1zbdlVScsWtNu0HGRKA4yzM1QuKEvx6s3pLKrjN704ax5h6
btRfMdnDW0diirx5LGqKYI8tIvI78SSLDf9hupGXvf6fR7R6J4bO7LSVKjzSb8YH
Osr/QrkO28/mb1lsOepayW8PwNvQnUg4EYY74ShCbv32QrI0VMRjq9Izbo62pp1E
pFqWTac9LQd+Aq6PDPVGLY8IjByVv/RtOKI1C/dpqVloo6A8oB/u300SHN6Sl1xi
ZQt6Pa1+ci6uayFqEAxhFg3ZIKXKmfnBOF3BJb6/0OuOGsYyCqfo/BmJD+u1Tl7V
mQds6qwlyKN4dVmbfoGD
=w3vy
-----END PGP SIGNATURE-----

--- End Message ---
_______________________________________________
Pkg-postgresql-public mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-postgresql-public

Reply via email to