Re: sepgsql contrib module

Поиск
Список
Период
Сортировка
От Robert Haas
Тема Re: sepgsql contrib module
Дата
Msg-id AANLkTikxj9jtiUWMa7+iHjfa+n9CZaCFwz-Ms1rW=Uws@mail.gmail.com
обсуждение исходный текст
Ответ на Re: sepgsql contrib module  (Tom Lane <tgl@sss.pgh.pa.us>)
Ответы Re: sepgsql contrib module  (Kohei KaiGai <kaigai@kaigai.gr.jp>)
Список pgsql-hackers
On Fri, Jan 21, 2011 at 10:46 AM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
> Robert Haas <robertmhaas@gmail.com> writes:
>> On Fri, Jan 21, 2011 at 9:55 AM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
>>> ALTER FUNCTION is supposed to cause plan invalidation in such a case.
>>> Not sure if GRANT plays nice with that though.
>
>> And in the case of SE-Linux, this could get changed from outside the
>> database.  Not sure how to handle that.  I guess we could just never
>> inline anything, but that might be an overreaction.
>
> I think SELinux is just out of luck in that case.  If it didn't refuse
> execution permission at the time we checked before inlining (which we
> do), it doesn't get to change its mind later.

Seems reasonable to me, if it works for KaiGai.

--
Robert Haas
EnterpriseDB: http://www.enterprisedb.com
The Enterprise PostgreSQL Company


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Robert Haas
Дата:
Сообщение: Re: How to know killed by pg_terminate_backend
Следующее
От: Robert Haas
Дата:
Сообщение: Re: Sync Rep for 2011CF1