Re: One question about security label command - Mailing list pgsql-hackers

From Kohei KaiGai
Subject Re: One question about security label command
Date
Msg-id CADyhKSXN5nH4ppaEntDPjaPG8DV5+Q1Zp5ccACYdbT890n=T+w@mail.gmail.com
Whole thread Raw
In response to Re: One question about security label command  (Alvaro Herrera <alvherre@2ndquadrant.com>)
Responses Re: One question about security label command  (Kohei KaiGai <kaigai@kaigai.gr.jp>)
List pgsql-hackers
2015-05-01 7:40 GMT+09:00 Alvaro Herrera <alvherre@2ndquadrant.com>:
> Kouhei Kaigai wrote:
>> > * Tom Lane (tgl@sss.pgh.pa.us) wrote:
>> > > The idea of making the regression test entirely independent of the
>> > > system's policy would presumably solve this problem, so I'd kind of
>> > > like to see progress on that front.
>> >
>> > Apologies, I guess it wasn't clear, but that's what I was intending to
>> > advocate.
>> >
>> OK, I'll try to design a new regression test policy that is independent
>> from the system's policy assumption, like unconfined domain.
>>
>> Please give me time for this work.
>
> Any progress here?
>
Not done.
The last version I rebuild had a trouble on user/role transition from
unconfined_u/unconfined_r to the self defined user/role...
So, I'm trying to keep the user/role field (that is not redefined for
several years) but to define self domain/types (that have been
redefined multiple times) for the regression test at this moment.

Thanks,
-- 
KaiGai Kohei <kaigai@kaigai.gr.jp>



pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: Use outerPlanState() consistently in executor code
Next
From: Jason Petersen
Date:
Subject: BuildTupleFromCStrings Memory Documentation?