sepgsql...selinux(8)

💅 sepgsql...selinux(8) — the group chat guide

okay so bestie, this is from the SELinux Policy corner of the world, and today's main character is sepgsql_trusted_proc. Welcome to the selinux(8) extended universe 🎀

---

✨ NAME ✨

sepgsql_trusted_proc_selinux — the Security Enhanced Linux Policy for the sepgsql_trusted_proc processes. literally what it says on the tin, no cap 🫶

---

🌸 DESCRIPTION 🌸

Security-Enhanced Linux secures the sepgsql_trusted_proc processes via flexible mandatory access control. yes bestie, mandatory — not the vibe-y optional kind 💅

The sepgsql_trusted_proc processes execute with the sepgsql_trusted_proc_t SELinux type. Wanna check if you've got these processes running? Just run ps with the -Z qualifier. easy peasy 🦋

For example:

ps -eZ | grep sepgsql_trusted_proc_t

---

👑 PROCESS TYPES 👑

SELinux defines process types (domains) for each process running on the system. every process gets a little label, it's giving name tag at a party 🎀

You can see the context of a process using the -Z option to ps.

Policy governs the access confined processes have to files. The SELinux sepgsql_trusted_proc policy is very flexible, allowing users to setup their sepgsql_trusted_proc processes in as secure a method as possible. flexible and secure? we love a multihyphenate icon ✨

The following process types are defined for sepgsql_trusted_proc:

• sepgsql_trusted_proc_t

Note: semanage permissive -a sepgsql_trusted_proc_t can be used to make the process type sepgsql_trusted_proc_t permissive. SELinux does not deny access to permissive process types, but the AVC (SELinux denials) messages are still generated. so it stops blocking you but keeps receipts 💀

---

🍓 BOOLEANS 🍓

SELinux policy is customizable based on least access required. the sepgsql_trusted_proc policy is extremely flexible and has several booleans that allow you to manipulate the policy and run sepgsql_trusted_proc with the tightest access possible. tightest access possible = the it-girl of security settings 💖

If you want to allow all domains to execute in fips_mode, you must turn on the fips_mode boolean. Enabled by default.

setsebool -P fips_mode 1

---

🌈 COMMANDS 🌈

• semanage fcontext — can also be used to manipulate default file context mappings. the file-labeling bestie 🦋
• semanage permissive — can also be used to manipulate whether or not a process type is permissive. vibe check for domains ✨
• semanage module — can also be used to enable/disable/install/remove policy modules. modular slay 💅
• semanage boolean — can also be used to manipulate the booleans. yes girl, flip those switches 🎀
• system-config-selinux — a GUI tool available to customize SELinux policy settings. for when the terminal is doing too much and you want buttons 🖱️

---

💜 AUTHOR 💜

This manual page was auto-generated using sepolicy manpage. the robot wrote it, she just did her makeup 💅✨

---

🔥 SEE ALSO 🔥

selinux(8), sepgsql_trusted_proc(8), semanage(8), restorecon(8), chcon(1), sepolicy(8), setsebool(8)

go read those too, iykyk 📚

---

and that's the whole page, bestie 🫶 this little number is sepgsql_trusted_proc from 26-10-06, living under the sepgsql...selinux(8) banner. mwah, periodt 💋🌸