From: | Ted Toth <txtoth(at)gmail(dot)com> |
---|---|
To: | Adrian Klaver <adrian(dot)klaver(at)aklaver(dot)com> |
Cc: | pgsql-general(at)postgresql(dot)org |
Subject: | Re: sepgsql where are the security labels |
Date: | 2014-11-13 15:37:47 |
Message-ID: | CAFPpqQEp3W_ohH=Dp1pHZ3gd2bfXuE2HTn1tUqy47iutxNvbLg@mail.gmail.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general |
Exactly what I talking about ... but unfortunately that appears to
have been based on KaiGai's branch and is not in 9.3. The current
discuss/work is around row-level-security with patches to 9.5 which is
not much help to me now :(
On Thu, Nov 13, 2014 at 9:26 AM, Adrian Klaver
<adrian(dot)klaver(at)aklaver(dot)com> wrote:
> On 11/13/2014 05:58 AM, Ted Toth wrote:
>>
>> This table maintains information about the context of postgresql
>> objects not the data in tables.
>
>
>
>
> http://www.slideshare.net/kaigai/label-based-mandatory-access-control-on-postgresql
>
> Slide 23
>
>
>>
>> On Wed, Nov 12, 2014 at 5:56 PM, Adrian Klaver
>> <adrian(dot)klaver(at)aklaver(dot)com> wrote:
>>>
>>> On 11/12/2014 02:45 PM, Ted Toth wrote:
>>>>
>>>>
>>>> I'm running selinux mls policy I've got labeled ipsec working and my
>>>> postgresql configured to load
>>>> sepgsql. I've created a db, run the sepgsql.sql script on it, created
>>>> tables and inserted data. How do I
>>>> query the security labels on the data?
>>>
>>>
>>>
>>> I do not use SECURITY LABELS, but it seems they can be queried here:
>>>
>>> http://www.postgresql.org/docs/9.3/interactive/view-pg-seclabels.html
>>>
>>>
>>> As best I can tell there is no
>>>>
>>>>
>>>> security_context
>>>> column on either of the tables I've created that I see? How does the
>>>> system column security_context get added to tables? I've read
>>>> everything I can find on the web but
>>>> a lot of it is dated. Here's how I'm creating my db and tables:
>>>>
>>>
>>> --
>>> Adrian Klaver
>>> adrian(dot)klaver(at)aklaver(dot)com
>>
>>
>
>
> --
> Adrian Klaver
> adrian(dot)klaver(at)aklaver(dot)com
From | Date | Subject | |
---|---|---|---|
Next Message | Adrian Klaver | 2014-11-13 15:44:45 | Re: sepgsql where are the security labels |
Previous Message | Adrian Klaver | 2014-11-13 15:37:38 | Re: sepgsql where are the security labels |