mirror of
https://github.com/postgres/postgres.git
synced 2025-07-28 23:42:10 +03:00
Allow sepgsql regression tests to be run from a user homedir.
KaiGai Kohei, with some changes by me.
This commit is contained in:
@ -1,4 +1,4 @@
|
||||
policy_module(sepgsql-regtest, 1.02)
|
||||
policy_module(sepgsql-regtest, 1.03)
|
||||
|
||||
gen_require(`
|
||||
all_userspace_class_perms
|
||||
@ -24,6 +24,7 @@ postgresql_procedure_object(sepgsql_regtest_trusted_proc_exec_t)
|
||||
role sepgsql_regtest_dba_r;
|
||||
userdom_base_user_template(sepgsql_regtest_dba)
|
||||
userdom_manage_home_role(sepgsql_regtest_dba_r, sepgsql_regtest_dba_t)
|
||||
userdom_exec_user_home_content_files(sepgsql_regtest_dba_t)
|
||||
userdom_write_user_tmp_sockets(sepgsql_regtest_user_t)
|
||||
optional_policy(`
|
||||
postgresql_admin(sepgsql_regtest_dba_t, sepgsql_regtest_dba_r)
|
||||
@ -40,6 +41,7 @@ optional_policy(`
|
||||
role sepgsql_regtest_user_r;
|
||||
userdom_base_user_template(sepgsql_regtest_user)
|
||||
userdom_manage_home_role(sepgsql_regtest_user_r, sepgsql_regtest_user_t)
|
||||
userdom_exec_user_home_content_files(sepgsql_regtest_user_t)
|
||||
userdom_write_user_tmp_sockets(sepgsql_regtest_user_t)
|
||||
optional_policy(`
|
||||
postgresql_role(sepgsql_regtest_user_r, sepgsql_regtest_user_t)
|
||||
|
Reference in New Issue
Block a user