Re: [RFC] sepgsql: prohibit users to relabel objects

Oh, I wasn't aware of that.
Any hints where to look at?

Thanks!

PS: sorry for top posting.

----- Original Message -----
From: "Robert Haas" <robertmhaas(at)gmail(dot)com>
To: "Denis Kirjanov" <kda(at)linux-powerpc(dot)org>
Cc: pgsql-hackers(at)postgresql(dot)org, "Alexey Zhuchkov" <alexey(at)itsirius(dot)su>, "Denis Kirjanov" <kda(at)itsirius(dot)su>
Sent: Wednesday, April 29, 2015 9:01:36 PM
Subject: Re: [HACKERS] [RFC] sepgsql: prohibit users to relabel objects

On Wed, Apr 29, 2015 at 9:15 AM, Denis Kirjanov <kda(at)linux-powerpc(dot)org> wrote:
> Enforce access control on security labels defined by admin
> and prohibit users to relabel the objects

Really? Why? I would think it's the policy's job to restrict relabel
operations.

--
Robert Haas
EnterpriseDB: http://www.enterprisedb.com
The Enterprise PostgreSQL Company