Re: Adding support for SE-Linux security

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Josh Berkus <josh(at)agliodbs(dot)com>
Cc: Bruce Momjian <bruce(at)momjian(dot)us>, KaiGai Kohei <kaigai(at)ak(dot)jp(dot)nec(dot)com>, jd(at)commandprompt(dot)com, David Fetter <david(at)fetter(dot)org>, Itagaki Takahiro <itagaki(dot)takahiro(at)oss(dot)ntt(dot)co(dot)jp>, KaiGai Kohei <kaigai(at)kaigai(dot)gr(dot)jp>, pgsql-hackers(at)postgresql(dot)org
Subject: Re: Adding support for SE-Linux security
Date: 2009-12-02 20:37:16
Message-ID: 21836.1259786236@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Josh Berkus <josh(at)agliodbs(dot)com> writes:
> When GIS was introduced to this list ten years ago it was criticized as
> a marginal feature and huge and intrusive. But today it's probably 40%
> of our user base, and growing far more rapidly than anything else with
> Postgres. Maybe SE will be more like Rules than like GIS in the long
> run, but there's no way for us to know that today.

What we do know is that GIS could be, and was, successfully developed
outside core Postgres. It didn't need to suck away a major portion of
the effort of the core developers. So it's not a very good analogy.

In the end this is a debate about what the community should do with its
finite development resources. Maybe, if we build this thing, they will
come and we'll get so much additional contribution that it'll be a win
all around. But somehow, alleged users who won't even decloak enough
to tell us they want it don't seem like likely candidates for becoming
major contributors.

In words of one syllable: I do not care at all whether the NSA would use
Postgres, if they're not willing to come and help us build it. If we
tried to build it without their input, we'd probably not produce what
they want anyway.

regards, tom lane

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Andrew Dunstan 2009-12-02 20:43:22 Re: [CORE] EOL for 7.4?
Previous Message Greg Stark 2009-12-02 20:30:07 Re: Page-level version upgrade (was: Block-level CRC checks)