Re: sepgsql contrib module - Mailing list pgsql-hackers

From Robert Haas
Subject Re: sepgsql contrib module
Date
Msg-id AANLkTikxj9jtiUWMa7+iHjfa+n9CZaCFwz-Ms1rW=Uws@mail.gmail.com
Whole thread Raw
In response to Re: sepgsql contrib module  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: sepgsql contrib module  (Kohei KaiGai <kaigai@kaigai.gr.jp>)
List pgsql-hackers
On Fri, Jan 21, 2011 at 10:46 AM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
> Robert Haas <robertmhaas@gmail.com> writes:
>> On Fri, Jan 21, 2011 at 9:55 AM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
>>> ALTER FUNCTION is supposed to cause plan invalidation in such a case.
>>> Not sure if GRANT plays nice with that though.
>
>> And in the case of SE-Linux, this could get changed from outside the
>> database.  Not sure how to handle that.  I guess we could just never
>> inline anything, but that might be an overreaction.
>
> I think SELinux is just out of luck in that case.  If it didn't refuse
> execution permission at the time we checked before inlining (which we
> do), it doesn't get to change its mind later.

Seems reasonable to me, if it works for KaiGai.

--
Robert Haas
EnterpriseDB: http://www.enterprisedb.com
The Enterprise PostgreSQL Company


pgsql-hackers by date:

Previous
From: Robert Haas
Date:
Subject: Re: How to know killed by pg_terminate_backend
Next
From: Robert Haas
Date:
Subject: Re: Sync Rep for 2011CF1