| From: | Dave Page <dpage(at)pgadmin(dot)org> |
|---|---|
| To: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
| Cc: | Andrew Dunstan <andrew(at)dunslane(dot)net>, pgsql-hackers <pgsql-hackers(at)postgresql(dot)org> |
| Subject: | Re: sepgsql logging |
| Date: | 2021-04-01 14:30:08 |
| Message-ID: | CA+OCxoxbCwOgu=6jDAO56vN=JJOzeQjbGCzEomHAgLvAo8JzJA@mail.gmail.com |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
On Thu, Apr 1, 2021 at 3:23 PM Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> wrote:
> Andrew Dunstan <andrew(at)dunslane(dot)net> writes:
> > On 4/1/21 8:32 AM, Dave Page wrote:
> >> It seems to me that sepgsql should also log the denial, but flag that
> >> permissive mode is on.
>
> > +1 for doing what selinux does if possible.
>
> +1. If selinux itself is doing that, it's hard to see a reason why
> we should not; and I concur that the info is useful.
>
Thanks both. I'll take a look at the code and see if I can whip up a patch
(it'll be a week or so as I'm taking some time off for Easter).
--
Dave Page
Blog: http://pgsnake.blogspot.com
Twitter: @pgsnake
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Arne Roland | 2021-04-01 14:38:59 | Re: Rename of triggers for partitioned tables |
| Previous Message | Tom Lane | 2021-04-01 14:23:10 | Re: sepgsql logging |