Re: [PATCH] SE-PgSQL/lite rev.2163 - Mailing list pgsql-hackers

From KaiGai Kohei
Subject Re: [PATCH] SE-PgSQL/lite rev.2163
Date
Msg-id 4A5E928A.50705@ak.jp.nec.com
Whole thread Raw
In response to Re: [PATCH] SE-PgSQL/lite rev.2163  (Robert Haas <robertmhaas@gmail.com>)
Responses Re: [PATCH] SE-PgSQL/lite rev.2163  (Robert Haas <robertmhaas@gmail.com>)
List pgsql-hackers
Robert Haas wrote:
> 2009/7/14 KaiGai Kohei <kaigai@ak.jp.nec.com>:
>> On the other hand, db_schema class was designed as an analogy to
>> directoty in filesystems. SELinux defines several permissions on
>> "dir" object class, such as "add_name", "remove_name" and "search".
> 
> I think that's a bad analogy and you need to make the permission names
> match the way PostgreSQL handles schema permissions generally.
> There's only so many times and ways to says this...

OK...
I can replace "search" by "usage".

Do you have any alternative ideas for "add_name" and "remove_name"?
-- 
OSS Platform Development Division, NEC
KaiGai Kohei <kaigai@ak.jp.nec.com>


pgsql-hackers by date:

Previous
From: Robert Haas
Date:
Subject: Re: [PATCH] SE-PgSQL/lite rev.2163
Next
From: KaiGai Kohei
Date:
Subject: [PATCH] SE-PgSQL/tiny rev.2193