Re: [0/4] Proposal of SE-PostgreSQL patches

Поиск
Список
Период
Сортировка
От KaiGai Kohei
Тема Re: [0/4] Proposal of SE-PostgreSQL patches
Дата
Msg-id 47DF177B.8040405@ak.jp.nec.com
обсуждение исходный текст
Ответ на Re: [0/4] Proposal of SE-PostgreSQL patches  (Josh Berkus <josh@agliodbs.com>)
Ответы Re: [0/4] Proposal of SE-PostgreSQL patches  (Josh Berkus <josh@agliodbs.com>)
Список pgsql-hackers
Josh Berkus wrote:
> KaiGai,
> 
>> The series of patches are the proposal of Security-Enhanced PostgreSQL
>> (SE-PostgreSQL) for the upstreamed PostgreSQL 8.4 development cycle.
> 
> Since I'm (Finally!) expecting the TrustedSolaris folks to put some work into 
> PostgreSQL as well this year, I'm going to ask them to look over PGACE to see 
> if this implementation is (still) generic enough to support TS as well.  If 
> it is, then it's probably generic enough to be a general building block.

We can extend PGACE framework to mount TrustedSolaris features.
If they need new hooks which is not used in SE-PostgreSQL, it can
remain the default behavior.
The default PGACE behavior gives us no effects in access controls.

A flexible framework is worthwhile for both operating systems.
Please confirm it to the TS folks.

Thanks,
-- 
OSS Platform Development Division, NEC
KaiGai Kohei <kaigai@ak.jp.nec.com>


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Tatsuo Ishii
Дата:
Сообщение: Re: Proposal: new large object API
Следующее
От: KaiGai Kohei
Дата:
Сообщение: Re: [PATCHES] [0/4] Proposal of SE-PostgreSQL patches