Re: Adding support for SE-Linux security - Mailing list pgsql-hackers

From Stephen Frost
Subject Re: Adding support for SE-Linux security
Date
Msg-id 20091211212921.GF17756@tamriel.snowman.net
Whole thread Raw
In response to Re: Adding support for SE-Linux security  (Stephen Smalley <sds@tycho.nsa.gov>)
List pgsql-hackers
Stephen (great name!),

* Stephen Smalley (sds@tycho.nsa.gov) wrote:
> Reference:
> http://www.usenix.org/event/sec02/wright.html
> http://lxr.linux.no/#linux+v2.6.32/include/linux/security.h
>
> The XACE framework for the X server is described by:
> http://www.x.org/releases/X11R7.5/doc/security/XACE-Spec.html
>
> The FreeBSD MAC framework is described by:
> http://www.freebsd.org/doc/en/books/arch-handbook/mac.html

Thanks for these pointers!  I'm sure KaiGai has probably already done a
review of these, but I'll take a look and would ask others who are
interested to please do the same.  Seeing the different options that
people have gone with (as opposed to just the SELinux/kernel version)
will undoubtably be helpful in deciding the best approach forward.
Thanks again!
    Stephen

pgsql-hackers by date:

Previous
From: Robert Treat
Date:
Subject: Re: SE-PostgreSQL/Lite Review
Next
From: Robert Haas
Date:
Subject: Re: Adding support for SE-Linux security