| From: | Bruce Momjian <bruce(at)momjian(dot)us> |
|---|---|
| To: | Zeugswetter Andreas OSB sIT <Andreas(dot)Zeugswetter(at)s-itsolutions(dot)at> |
| Cc: | KaiGai Kohei <kaigai(at)ak(dot)jp(dot)nec(dot)com>, KaiGai Kohei <kaigai(at)kaigai(dot)gr(dot)jp>, Peter Eisentraut <peter_e(at)gmx(dot)net>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, "pgsql-hackers(at)postgresql(dot)org" <pgsql-hackers(at)postgresql(dot)org> |
| Subject: | Re: Updates of SE-PostgreSQL 8.4devel patches (r1268) |
| Date: | 2008-12-11 15:45:03 |
| Message-ID: | 200812111545.mBBFj3B18262@momjian.us |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
Zeugswetter Andreas OSB sIT wrote:
> Please reread with above correction,
> and I'll also try a little differently:
>
> Since a pg_security row already represents a combination of rights
> within selinux, I do not really see why that cannot be extended to "a combination
> of rowacl and selinux rights" or more general "one oid represents a unique
> combination of rights within different subsystems" ?
>
> A simplified example of pg_security:
> oid rights
> 1 selinux:secret_read rowacl:ra,rb
> 2 selinux:unlabeled_t rowacl:ra,rb
> 3 selinux:secret_read rowacl:ra
Yes, I suggested that but the patch author thought it would be better to
have two columns.
--
Bruce Momjian <bruce(at)momjian(dot)us> http://momjian.us
EnterpriseDB http://enterprisedb.com
+ If your life is a hard drive, Christ can be your backup. +
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Pavel Stehule | 2008-12-11 15:48:48 | Re: COCOMO & Indians |
| Previous Message | KaiGai Kohei | 2008-12-11 15:43:38 | Re: Updates of SE-PostgreSQL 8.4devel patches (r1268) |