Re: add a MAC check for TRUNCATE

Поиск
Список
Период
Сортировка
От Joe Conway
Тема Re: add a MAC check for TRUNCATE
Дата
Msg-id a9b613cc-b3a6-9ec7-a3cc-136355df7ee0@joeconway.com
обсуждение исходный текст
Ответ на Re: add a MAC check for TRUNCATE  (Tom Lane <tgl@sss.pgh.pa.us>)
Ответы Re: add a MAC check for TRUNCATE  (Yuli Khodorkovskiy <yuli.khodorkovskiy@crunchydata.com>)
Список pgsql-hackers
On 9/6/19 8:07 PM, Tom Lane wrote:
> Joe Conway <mail@joeconway.com> writes:
>> On 9/6/19 2:18 PM, Tom Lane wrote:
>>> sepgsql hasn't worked on RHEL6 in a long time, if ever; it requires
>>> a newer version of libselinux than what ships in RHEL6.  So I'm not
>>> concerned about that.  We do need to worry about RHEL7, and whatever
>>> is the oldest version of Fedora that is running the sepgsql tests
>>> in the buildfarm.
> 
>> I could be wrong, but as far as I know rhinoceros is the only buildfarm
>> animal running sepgsql tests.
> 
> It seems reasonable to define RHEL7 as the oldest SELinux version we
> still care about.  But it'd be a good idea for somebody to be running
> a fairly bleeding-edge Fedora animal with sepgsql enabled, so we get
> coverage of the other end of the scale.


Yeah -- I was planning to eventually register a RHEL8 animal, but I
should probably do one for Fedora as well. I'll bump the priority for
that on my personal TODO.

Joe
-- 
Crunchy Data - http://crunchydata.com
PostgreSQL Support for Secure Enterprises
Consulting, Training, & Open Source Development



В списке pgsql-hackers по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: add a MAC check for TRUNCATE
Следующее
От: Peter Geoghegan
Дата:
Сообщение: Re: amcheck verification for GiST