Allow sepgsql labels to depend on object name.
The main change here is to call security_compute_create_name_raw()
rather than security_compute_create_raw(). This ups the minimum
requirement for libselinux from 2.0.99 to 2.1.10, but it looks
like most distributions will have picked that up before 9.3 is out.
KaiGai Kohei
Branch
------
master
Details
-------
http://git.postgresql.org/pg/commitdiff/0f05840bf4c256b838eca8f1be9d7b5be82ccd0e
Modified Files
--------------
configure | 24 ++++++++++++------------
configure.in | 4 ++--
contrib/sepgsql/database.c | 3 ++-
contrib/sepgsql/expected/label.out | 35 ++++++++++++++++++++++++++++++++---
contrib/sepgsql/proc.c | 3 ++-
contrib/sepgsql/relation.c | 9 ++++++---
contrib/sepgsql/schema.c | 13 +++++++++----
contrib/sepgsql/selinux.c | 11 +++++++----
contrib/sepgsql/sepgsql-regtest.te | 17 ++++++++++++++++-
contrib/sepgsql/sepgsql.h | 3 ++-
contrib/sepgsql/sql/label.sql | 11 ++++++++---
contrib/sepgsql/uavc.c | 4 ++--
doc/src/sgml/sepgsql.sgml | 7 ++++---
13 files changed, 104 insertions(+), 40 deletions(-)