Skip site navigation (1) Skip section navigation (2)

Re: Spoofing as the postmaster

From: "Joshua D(dot) Drake" <jd(at)commandprompt(dot)com>
To: Greg Smith <gsmith(at)gregsmith(dot)com>
Cc: pgsql-hackers(at)postgresql(dot)org
Subject: Re: Spoofing as the postmaster
Date: 2007-12-29 20:15:28
Message-ID: (view raw or whole thread)
Lists: pgsql-hackers
Hash: SHA1

On Sat, 29 Dec 2007 14:40:29 -0500 (EST)
Greg Smith <gsmith(at)gregsmith(dot)com> wrote:

> On Sat, 29 Dec 2007, Joshua D. Drake wrote:
> >
> > ???
> Getting that to work required some obtrusive changes to the source
> code, which they've only done to 8.2.4.  Even that doesn't seem to be 
> production-quality and it's not clear how that will make its way into 
> newer versions yet.

"they've" has the potential to be "we"... As I recall the individual
made a reasonable effort to introduce the work that he was doing to the

> The job here is to work on the SELinux policies for PostgreSQL.  You
> can't just re-use whatever work has gone into the SE-PostgreSQL ones,
> because those presume you're using their modified server instead of
> the regular one.

Fair enough. I was just trying to offer a source to start with.

>  But unless
> there's somebody else with a burning need to work on this area I
> doubt that will happen--there's nothing about SELinux that anybody
> does just for fun.

Ya think? :P

I recognize that this "SE PGSQL" has the potential to be a portability
nightmare (as it only works on linux) but it certainly has potential to
give us a leg up on a lot of work.

Anyway, not saying its good code but I did read the docs and it sure
looks cool.


Joshua D. Drake

- -- 
The PostgreSQL Company: Since 1997, 
Sales/Support: +1.503.667.4564   24x7/Emergency: +1.800.492.2240
Donate to the PostgreSQL Project:
SELECT 'Training', 'Consulting' FROM vendor WHERE name = 'CMD'

Version: GnuPG v1.4.6 (GNU/Linux)


In response to


pgsql-hackers by date

Next:From: Greg SmithDate: 2007-12-29 23:55:04
Subject: Re: Spoofing as the postmaster
Previous:From: Greg SmithDate: 2007-12-29 19:40:29
Subject: Re: Spoofing as the postmaster

Privacy Policy | About PostgreSQL
Copyright © 1996-2015 The PostgreSQL Global Development Group