Re: security label support, revised

From: Robert Haas <robertmhaas(at)gmail(dot)com>
To: KaiGai Kohei <kaigai(at)kaigai(dot)gr(dot)jp>
Cc: KaiGai Kohei <kaigai(at)ak(dot)jp(dot)nec(dot)com>, pgsql-hackers(at)postgresql(dot)org
Subject: Re: security label support, revised
Date: 2010-09-13 12:57:04
Message-ID: AANLkTinWA2yTa03i3xRscOxDTF4e1OW91OuXjWGA+rw_@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Mon, Sep 13, 2010 at 8:38 AM, KaiGai Kohei <kaigai(at)kaigai(dot)gr(dot)jp> wrote:
> Yes, if and when MAC-X and MAC-Y are installed, it is significant event
> for MAC-X to change X's label, so MAC-X may need to check special
> permissions. But it is a common event for MAC-Y and DAC, so they checks
> an appropriate permission to change one of the properties. Hoever, it
> does not mean we should not give any chance MAC-Y and DAC to check
> something.
>
> I'll revise my patch within a couple of days.

I have a feeling we are talking past each other.

--
Robert Haas
EnterpriseDB: http://www.enterprisedb.com
The Enterprise Postgres Company

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Heikki Linnakangas 2010-09-13 13:01:16 Re: pg_ctl emits strange warning message
Previous Message KaiGai Kohei 2010-09-13 12:38:02 Re: security label support, revised