From: | Robert Haas <rhaas(at)postgresql(dot)org> |
---|---|
To: | pgsql-committers(at)postgresql(dot)org |
Subject: | pgsql: Allow sepgsql labels to depend on object name. |
Date: | 2013-03-28 19:46:48 |
Message-ID: | E1ULIme-0008CS-BX@gemulon.postgresql.org |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-committers |
Allow sepgsql labels to depend on object name.
The main change here is to call security_compute_create_name_raw()
rather than security_compute_create_raw(). This ups the minimum
requirement for libselinux from 2.0.99 to 2.1.10, but it looks
like most distributions will have picked that up before 9.3 is out.
KaiGai Kohei
Branch
------
master
Details
-------
http://git.postgresql.org/pg/commitdiff/0f05840bf4c256b838eca8f1be9d7b5be82ccd0e
Modified Files
--------------
configure | 24 ++++++++++++------------
configure.in | 4 ++--
contrib/sepgsql/database.c | 3 ++-
contrib/sepgsql/expected/label.out | 35 ++++++++++++++++++++++++++++++++---
contrib/sepgsql/proc.c | 3 ++-
contrib/sepgsql/relation.c | 9 ++++++---
contrib/sepgsql/schema.c | 13 +++++++++----
contrib/sepgsql/selinux.c | 11 +++++++----
contrib/sepgsql/sepgsql-regtest.te | 17 ++++++++++++++++-
contrib/sepgsql/sepgsql.h | 3 ++-
contrib/sepgsql/sql/label.sql | 11 ++++++++---
contrib/sepgsql/uavc.c | 4 ++--
doc/src/sgml/sepgsql.sgml | 7 ++++---
13 files changed, 104 insertions(+), 40 deletions(-)
From | Date | Subject | |
---|---|---|---|
Next Message | Robert Haas | 2013-03-28 19:57:48 | pgsql: sepgsql: Documentation improvements. |
Previous Message | Tom Lane | 2013-03-28 19:26:33 | pgsql: Update time zone data files to tzdata release 2013b. |