Re: add a MAC check for TRUNCATE - Mailing list pgsql-hackers

From Robert Haas
Subject Re: add a MAC check for TRUNCATE
Date
Msg-id CA+TgmoacuA_J=Q16g4VpEJ9J743MoqChaN8atj+g_qguuAMyHw@mail.gmail.com
Whole thread Raw
In response to Re: add a MAC check for TRUNCATE  (Stephen Frost <sfrost@snowman.net>)
List pgsql-hackers
On Fri, Sep 6, 2019 at 10:40 AM Stephen Frost <sfrost@snowman.net> wrote:
> There are actual reasons why the 'DELETE' privilege is *not* the same as
> 'TRUNCATE' in PostgreSQL and I'm really not convinced that we should
> just be tossing that distinction out the window for users of SELinux.

+1.

-- 
Robert Haas
EnterpriseDB: http://www.enterprisedb.com
The Enterprise PostgreSQL Company



pgsql-hackers by date:

Previous
From: Jehan-Guillaume de Rorthais
Date:
Subject: Re: Fetching timeline during recovery
Next
From: "Daniel Verite"
Date:
Subject: Re: [PATCH] vacuumlo: print the number of large objects going to be removed