> This is totally separate from the really important question of whether
> SE-Linux has a future, and another about whether, if SE-Linux has a
> future, PostgreSQL needs to go there.
If the hooks are generic enough that the could potentially be adapted to
other security frameworks, yes. The need to have cohesive centralized
systems permissions management hasn't gone away, whatever anyone thinks
of the SE-linux implementation.
That's why I was hoping to have the TrustedSolaris folks working on
this, but we've pretty much lost access to them.
--Josh Berkus