* Tom Lane (t...@sss.pgh.pa.us) wrote: > Heikki Linnakangas <heikki.linnakan...@enterprisedb.com> writes: > > KaiGai Kohei wrote: > >> As I promised last week, SE-PostgreSQL patches are revised here: > > > The patch adds permission checks to SET/SHOW. If that's useful > > functionality, it would be nice to see that as a separate patch, not > > requiring SE-Linux. > > My goodness. This patch seems to be going FAR beyond what I thought > its charter was.
I agree. I thought the idea was that the first round of SE-PostgreSQL
additions would be to add SE hooks for permissions that PG already
implements. Other permissions would then be implemented in a PG-way
first, and SE hooks then added to those later.
Stephen
signature.asc
Description: Digital signature
