Re: [PATCH] Add <> support to sepgsql_restorecon

Поиск
Список
Период
Сортировка
От Ted X Toth
Тема Re: [PATCH] Add <> support to sepgsql_restorecon
Дата
Msg-id 167396754287.1137.10261043173596032365.pgcf@coridan.postgresql.org
обсуждение исходный текст
Ответ на Re: [PATCH] Add <> support to sepgsql_restorecon  (Joe Conway <mail@joeconway.com>)
Ответы Re: [PATCH] Add <> support to sepgsql_restorecon  (Joe Conway <mail@joeconway.com>)
Re: [PATCH] Add <> support to sepgsql_restorecon  ("Gregory Stark (as CFM)" <stark.cfm@gmail.com>)
Список pgsql-hackers
The intent of this patch is not to stop all relabeling only to stop sepgsql_restorecon from doing a bulk relabel. I
believesepgsql_object_relabel is called by the 'SECURITY LABEL'  statement which I'm using to set the label of db
objectsto a specific context which I would not want altered later by a restorecon. This is particularly important in a
MLS(multi-level security) environment where for example if a row were labeled at the 'secret' level I would not
restoreconto relabel it possibly causing a downgrade. 

The new status of this patch is: Ready for Committer

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Tomas Vondra
Дата:
Сообщение: Re: Sampling-based timing for EXPLAIN ANALYZE
Следующее
От: Tom Lane
Дата:
Сообщение: Re: Extracting cross-version-upgrade knowledge from buildfarm client