Re: sepgsql contrib module
От | Robert Haas |
---|---|
Тема | Re: sepgsql contrib module |
Дата | |
Msg-id | AANLkTikxj9jtiUWMa7+iHjfa+n9CZaCFwz-Ms1rW=Uws@mail.gmail.com обсуждение исходный текст |
Ответ на | Re: sepgsql contrib module (Tom Lane <tgl@sss.pgh.pa.us>) |
Ответы |
Re: sepgsql contrib module
|
Список | pgsql-hackers |
On Fri, Jan 21, 2011 at 10:46 AM, Tom Lane <tgl@sss.pgh.pa.us> wrote: > Robert Haas <robertmhaas@gmail.com> writes: >> On Fri, Jan 21, 2011 at 9:55 AM, Tom Lane <tgl@sss.pgh.pa.us> wrote: >>> ALTER FUNCTION is supposed to cause plan invalidation in such a case. >>> Not sure if GRANT plays nice with that though. > >> And in the case of SE-Linux, this could get changed from outside the >> database. Not sure how to handle that. I guess we could just never >> inline anything, but that might be an overreaction. > > I think SELinux is just out of luck in that case. If it didn't refuse > execution permission at the time we checked before inlining (which we > do), it doesn't get to change its mind later. Seems reasonable to me, if it works for KaiGai. -- Robert Haas EnterpriseDB: http://www.enterprisedb.com The Enterprise PostgreSQL Company
В списке pgsql-hackers по дате отправления: