Re: [0/4] Proposal of SE-PostgreSQL patches

On Mon, 5 May 2008, Tom Lane wrote:

> elog() should not be used for user-facing errors.  I couldn't easily
> tell just which of the messages are likely to be seen by users and
> which ones should be "can't happen" cases, but certainly there are
> a whole lot of these that need to be ereport()s.  Likely there need
> to be some new ERRCODEs too.

And it would be a nice step toward the scenarios I was asking about if 
there was a GUC variable for what level to log security violations at.  I 
realize now the tuple-level warnings are going into the SELinux logs 
rather than the PostgreSQL ones, but it should be easier to change policy 
violations that impact the server to something other than just ERROR.

--
* Greg Smith gsmith@gregsmith.com http://www.gregsmith.com Baltimore, MD