pgsql: Allow sepgsql labels to depend on object name.

From: Robert Haas <rhaas(at)postgresql(dot)org>
To: pgsql-committers(at)postgresql(dot)org
Subject: pgsql: Allow sepgsql labels to depend on object name.
Date: 2013-03-28 19:46:48
Message-ID: E1ULIme-0008CS-BX@gemulon.postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-committers

Allow sepgsql labels to depend on object name.

The main change here is to call security_compute_create_name_raw()
rather than security_compute_create_raw(). This ups the minimum
requirement for libselinux from 2.0.99 to 2.1.10, but it looks
like most distributions will have picked that up before 9.3 is out.

KaiGai Kohei

Branch
------
master

Details
-------
http://git.postgresql.org/pg/commitdiff/0f05840bf4c256b838eca8f1be9d7b5be82ccd0e

Modified Files
--------------
configure | 24 ++++++++++++------------
configure.in | 4 ++--
contrib/sepgsql/database.c | 3 ++-
contrib/sepgsql/expected/label.out | 35 ++++++++++++++++++++++++++++++++---
contrib/sepgsql/proc.c | 3 ++-
contrib/sepgsql/relation.c | 9 ++++++---
contrib/sepgsql/schema.c | 13 +++++++++----
contrib/sepgsql/selinux.c | 11 +++++++----
contrib/sepgsql/sepgsql-regtest.te | 17 ++++++++++++++++-
contrib/sepgsql/sepgsql.h | 3 ++-
contrib/sepgsql/sql/label.sql | 11 ++++++++---
contrib/sepgsql/uavc.c | 4 ++--
doc/src/sgml/sepgsql.sgml | 7 ++++---
13 files changed, 104 insertions(+), 40 deletions(-)

Browse pgsql-committers by date

  From Date Subject
Next Message Robert Haas 2013-03-28 19:57:48 pgsql: sepgsql: Documentation improvements.
Previous Message Tom Lane 2013-03-28 19:26:33 pgsql: Update time zone data files to tzdata release 2013b.