Re: [PATCH] Add <> support to sepgsql_restorecon - Mailing list pgsql-hackers

From Ted X Toth
Subject Re: [PATCH] Add <> support to sepgsql_restorecon
Date
Msg-id 167396754287.1137.10261043173596032365.pgcf@coridan.postgresql.org
Whole thread Raw
In response to Re: [PATCH] Add <> support to sepgsql_restorecon  (Joe Conway <mail@joeconway.com>)
Responses Re: [PATCH] Add <> support to sepgsql_restorecon
Re: [PATCH] Add <> support to sepgsql_restorecon
List pgsql-hackers
The intent of this patch is not to stop all relabeling only to stop sepgsql_restorecon from doing a bulk relabel. I
believesepgsql_object_relabel is called by the 'SECURITY LABEL'  statement which I'm using to set the label of db
objectsto a specific context which I would not want altered later by a restorecon. This is particularly important in a
MLS(multi-level security) environment where for example if a row were labeled at the 'secret' level I would not
restoreconto relabel it possibly causing a downgrade. 

The new status of this patch is: Ready for Committer

pgsql-hackers by date:

Previous
From: Tomas Vondra
Date:
Subject: Re: Sampling-based timing for EXPLAIN ANALYZE
Next
From: Tom Lane
Date:
Subject: Re: Extracting cross-version-upgrade knowledge from buildfarm client