Greetings, While going over the contrib modules, I noticed that sepgsql was not updated for partitioned tables. What that appears to mean is that it's not possible to define labels on partitioned tables. As I recall, accessing the parent of a table will, similar to the GRANT system, not perform checkes against the child tables, meaning that there's no way to have SELinux checks properly enforced when partitioned tables are being used.
This is an issue which should be resolved for PG10, so I'll add it to the open items list. Thanks! Stephen
signature.asc
Description: Digital signature