Re: [HACKERS] trust authentication behavior

2015-05-17 Thread Denis Kirjanov
- Ursprüngliche Mail - Von: "Kohei KaiGai" An: "Robert Haas" CC: "David G. Johnston" , "Denis Kirjanov" , pgsql-hackers@postgresql.org, "Kohei KaiGai" Gesendet: Samstag, 16. Mai 2015 03:32:55 Betreff: Re: [HACKERS] trust authenticati

Re: [HACKERS] trust authentication behavior

2015-05-14 Thread Denis Kirjanov
Yeah, but the idea is to do that without the pg_hba.conf - Ursprüngliche Mail - Von: "David G. Johnston" An: "Denis Kirjanov" CC: pgsql-hackers@postgresql.org Gesendet: Donnerstag, 14. Mai 2015 18:22:45 Betreff: Re: [HACKERS] trust authentication behavior On Thu,

[HACKERS] trust authentication behavior

2015-05-14 Thread Denis Kirjanov
Hello guys, Is it possible to restrict the trust auth method to accept local connections only using the selinux policy? Thank you! -- Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers

Re: [HACKERS] [RFC] sepgsql: prohibit users to relabel objects

2015-04-30 Thread Denis Kirjanov
Oh, I wasn't aware of that. Any hints where to look at? Thanks! PS: sorry for top posting. - Original Message - From: "Robert Haas" To: "Denis Kirjanov" Cc: pgsql-hackers@postgresql.org, "Alexey Zhuchkov" , "Denis Kirjanov" Sent: Wed

[HACKERS] [RFC] sepgsql: prohibit users to relabel objects

2015-04-29 Thread Denis Kirjanov
Enforce access control on security labels defined by admin and prohibit users to relabel the objects Signed-off-by: Denis Kirjanov --- contrib/sepgsql/label.c |5 + 1 file changed, 5 insertions(+) diff --git a/contrib/sepgsql/label.c b/contrib/sepgsql/label.c index ef7661c..470b90e