[HACKERS] partitioned tables and contrib/sepgsql - Mailing list pgsql-hackers

From Stephen Frost
Subject [HACKERS] partitioned tables and contrib/sepgsql
Date
Msg-id 20170309144718.GE9812@tamriel.snowman.net
Whole thread Raw
Responses Re: [HACKERS] partitioned tables and contrib/sepgsql  (Mike Palmiotto <mike.palmiotto@crunchydata.com>)
Re: partitioned tables and contrib/sepgsql  (Robert Haas <robertmhaas@gmail.com>)
List pgsql-hackers
Greetings,

While going over the contrib modules, I noticed that sepgsql was not
updated for partitioned tables.  What that appears to mean is that it's
not possible to define labels on partitioned tables.  As I recall,
accessing the parent of a table will, similar to the GRANT system, not
perform checkes against the child tables, meaning that there's no way to
have SELinux checks properly enforced when partitioned tables are being
used.

This is an issue which should be resolved for PG10, so I'll add it to
the open items list.

Thanks!

Stephen

pgsql-hackers by date:

Previous
From: Andrew Borodin
Date:
Subject: Re: [HACKERS] [GSoC] Self introduction and question to mentors
Next
From: Mike Palmiotto
Date:
Subject: Re: [HACKERS] partitioned tables and contrib/sepgsql