Re: [gentoo-hardened] [SELINUX]: Postgresql don't start

[Grob Team]

On 4/27/05, petre rodan <kaiowas@g.o> wrote:
>
> Hi
>
> Grob Team wrote:
> > Hi,
> >
> > When trying to start postgresql (run_init /etc/init.d/postgre start) I
> > got the "Starting PostGreSql" and nothing after, when I do a ps to see
> > what happens, I got this:
> >
> > system_u:system_r:initrc_su_t   root      5879  0.0  0.2  2224  932
> > tty1     S+   14:16   0:00 su - postgres -c /usr/bin/pg_ctl start -D
> > '/var/lib/postgresql/data' -s -l
> > '/var/lib/postgresql/data/postgresql.log' -o ''
> > system_u:system_r:system_chkpwd_t root    5880  0.0  0.0     0    0
> > tty1     Z+   14:16   0:00 [unix_chkpwd] <defunct>
> >
> > So, I tried to do: so - postgres and it "freeze" too. So maybe its not
> > postgres but a problem with pam/su. In the logfile, I have this:
> > Apr 26 14:55:34 [unix_chkpwd] could not get username from shadow (postgres))
> >
> > However, postgres is a valid user
> > # cat /etc/passwd | grep postgres
> > postgres:x:70:70::/var/lib/postgresql:/bin/false
> >
> > My version of pam is: 0.77-r6
> >
> > This is the output of the context of /etc/passwd and /etc/shadow
> >
> > -rw-r--r--  root root system_u:object_r:etc_t /etc/passwd
> > -rw-------  root root system_u:object_r:shadow_t /etc/shadow
> >
> > Someone have an idea about the problem?
> > Thank you.
>
> there has to be a postgres line in /etc/shadow
>
> so go ahead and do smth like
> echo 0 > /selinux/enforce
> echo 'postgres:!:12000:0:99999:7:::' >> /etc/shadow
> /usr/sbin/setfiles -v /etc/security/selinux/src/policy/file_contexts/file_contexts /etc/shadow
> echo 1 > /selinux/enforce
>
> and please don't ask why that line is missing :)
>
> bye,
> peter
>
> --
> petre rodan
> <kaiowas@g.o>
> Developer,
> Hardened Gentoo Linux
>
>
>

Hi

You were right. Now all is working. I  didn't think to look under
shadow because it was under passwd. Thank you petre and Konstantin :)

-- 
gentoo-hardened@g.o mailing list