Re: sepgsql where are the security labels

From: Ted Toth <txtoth(at)gmail(dot)com>
To: Adrian Klaver <adrian(dot)klaver(at)aklaver(dot)com>
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: sepgsql where are the security labels
Date: 2014-11-13 15:37:47
Message-ID: CAFPpqQEp3W_ohH=Dp1pHZ3gd2bfXuE2HTn1tUqy47iutxNvbLg@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Exactly what I talking about ... but unfortunately that appears to
have been based on KaiGai's branch and is not in 9.3. The current
discuss/work is around row-level-security with patches to 9.5 which is
not much help to me now :(

On Thu, Nov 13, 2014 at 9:26 AM, Adrian Klaver
<adrian(dot)klaver(at)aklaver(dot)com> wrote:
> On 11/13/2014 05:58 AM, Ted Toth wrote:
>>
>> This table maintains information about the context of postgresql
>> objects not the data in tables.
>
>
>
>
> http://www.slideshare.net/kaigai/label-based-mandatory-access-control-on-postgresql
>
> Slide 23
>
>
>>
>> On Wed, Nov 12, 2014 at 5:56 PM, Adrian Klaver
>> <adrian(dot)klaver(at)aklaver(dot)com> wrote:
>>>
>>> On 11/12/2014 02:45 PM, Ted Toth wrote:
>>>>
>>>>
>>>> I'm running selinux mls policy I've got labeled ipsec working and my
>>>> postgresql configured to load
>>>> sepgsql. I've created a db, run the sepgsql.sql script on it, created
>>>> tables and inserted data. How do I
>>>> query the security labels on the data?
>>>
>>>
>>>
>>> I do not use SECURITY LABELS, but it seems they can be queried here:
>>>
>>> http://www.postgresql.org/docs/9.3/interactive/view-pg-seclabels.html
>>>
>>>
>>> As best I can tell there is no
>>>>
>>>>
>>>> security_context
>>>> column on either of the tables I've created that I see? How does the
>>>> system column security_context get added to tables? I've read
>>>> everything I can find on the web but
>>>> a lot of it is dated. Here's how I'm creating my db and tables:
>>>>
>>>
>>> --
>>> Adrian Klaver
>>> adrian(dot)klaver(at)aklaver(dot)com
>>
>>
>
>
> --
> Adrian Klaver
> adrian(dot)klaver(at)aklaver(dot)com

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Adrian Klaver 2014-11-13 15:44:45 Re: sepgsql where are the security labels
Previous Message Adrian Klaver 2014-11-13 15:37:38 Re: sepgsql where are the security labels