Re: Proposal of SE-PostgreSQL patches (for CommitFest:Sep)

From: Peter Eisentraut <peter_e(at)gmx(dot)net>
To: Aidan Van Dyk <aidan(at)highrise(dot)ca>
Cc: Robert Haas <robertmhaas(at)gmail(dot)com>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, josh(at)agliodbs(dot)com, pgsql-hackers(at)postgresql(dot)org
Subject: Re: Proposal of SE-PostgreSQL patches (for CommitFest:Sep)
Date: 2008-09-24 15:32:16
Message-ID: 48DA5D80.2000205@gmx.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Aidan Van Dyk wrote:
> * Robert Haas <robertmhaas(at)gmail(dot)com> [080924 00:15]:
>
>> But I do think
>> it's worthwhile to ask whether it makes sense to introduce a bunch of
>> features that are only usable to people running SELinux.
>
> Actually, I'ld go one stroke farther, and ask:
> Does it make sense to introduce a bunch of features that are only
> usable to people *able to write proper SELinux policy sets* (or whatever
> they are called).

I consider this a valid concern, but given that some people want MAC and
no one has shown a better way to implement MAC than SELinux, you can
hardly use that as an objection against this particular patch.

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Gevik Babakhani 2008-09-24 15:34:39 Preserve identifier case
Previous Message Simon Riggs 2008-09-24 15:15:39 Re: Initial prefetch performance testing