From: | Craig Ringer <craig(at)2ndQuadrant(dot)com> |
---|---|
To: | "pgsql-general(at)postgresql(dot)org" <pgsql-general(at)postgresql(dot)org> |
Cc: | Kohei KaiGai <kaigai(at)kaigai(dot)gr(dot)jp> |
Subject: | SELinux users - Please consider testing SELinux/SEPostgreSQL patches |
Date: | 2013-01-21 07:47:06 |
Message-ID: | 50FCF27A.4050905@2ndQuadrant.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general |
Hi all
Anybody here who has particular interest in or skill with SELinux is
invited (begged?) to help test KaiGai Kohei's patches for enhancing
PostgreSQL's SELinux/SEPostgreSQL support. These changes are proposed
for 9.3, but have had relatively little interest from patch reviewers
and are in danger of slipping to a later release without somebody
interested in the area stepping up.
The patches are:
Add a new event type of object_access_hook named OAT_POST_ALTER. This
allows extensions to catch controls just after system catalogs are
updated. Patch also adds sepgsql permission check capability on some
ALTER commands, but not all.
https://commitfest.postgresql.org/action/patch_view?id=1003
This patch adds sepgsql support for permission checks equivalent
to the existing SCHEMA USE privilege:
https://commitfest.postgresql.org/action/patch_view?id=1065
This patch adds sepgsql support for permission checks almost
equivalent to the existing FUNCTION EXECUTE privilege:
https://commitfest.postgresql.org/action/patch_view?id=1066
This patch adds sepgsql the feature of name qualified creation label:
https://commitfest.postgresql.org/action/patch_view?id=1064
If you're interested in SELinux, please glance at the discussion linked
to in those patch entries, then grab a patch and try it out as per the
reviewer guidelines:
http://wiki.postgresql.org/wiki/Reviewing_a_Patch
--
Craig Ringer http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Training & Services
From | Date | Subject | |
---|---|---|---|
Next Message | Tim Uckun | 2013-01-21 08:04:34 | Running update in chunks? |
Previous Message | Magnus Hagander | 2013-01-21 07:15:47 | Re: pg_Restore |