| From: | Stephen Frost <sfrost(at)snowman(dot)net> |
|---|---|
| To: | Stephen Smalley <sds(at)tycho(dot)nsa(dot)gov> |
| Cc: | Robert Haas <robertmhaas(at)gmail(dot)com>, "David P(dot) Quigley" <dpquigl(at)tycho(dot)nsa(dot)gov>, KaiGai Kohhookei <kaigai(at)ak(dot)jp(dot)nec(dot)com>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Bruce Momjian <bruce(at)momjian(dot)us>, Magnus Hagander <magnus(at)hagander(dot)net>, Chad Sellers <csellers(at)tresys(dot)com>, Josh Berkus <josh(at)agliodbs(dot)com>, jd <jd(at)commandprompt(dot)com>, David Fetter <david(at)fetter(dot)org>, Itagaki Takahiro <itagaki(dot)takahiro(at)oss(dot)ntt(dot)co(dot)jp>, KaiGai Kohei <kaigai(at)kaigai(dot)gr(dot)jp>, pgsql-hackers <pgsql-hackers(at)postgresql(dot)org>, Eamon Walsh <ewalsh(at)tycho(dot)nsa(dot)gov> |
| Subject: | Re: Adding support for SE-Linux security |
| Date: | 2009-12-11 21:29:21 |
| Message-ID: | 20091211212921.GF17756@tamriel.snowman.net |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
Stephen (great name!),
* Stephen Smalley (sds(at)tycho(dot)nsa(dot)gov) wrote:
> Reference:
> http://www.usenix.org/event/sec02/wright.html
> http://lxr.linux.no/#linux+v2.6.32/include/linux/security.h
>
> The XACE framework for the X server is described by:
> http://www.x.org/releases/X11R7.5/doc/security/XACE-Spec.html
>
> The FreeBSD MAC framework is described by:
> http://www.freebsd.org/doc/en/books/arch-handbook/mac.html
Thanks for these pointers! I'm sure KaiGai has probably already done a
review of these, but I'll take a look and would ask others who are
interested to please do the same. Seeing the different options that
people have gone with (as opposed to just the SELinux/kernel version)
will undoubtably be helpful in deciding the best approach forward.
Thanks again!
Stephen
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Robert Haas | 2009-12-11 21:34:42 | Re: Adding support for SE-Linux security |
| Previous Message | Robert Treat | 2009-12-11 21:27:28 | Re: SE-PostgreSQL/Lite Review |