pgsql: Allow sepgsql labels to depend on object name.
От | Robert Haas |
---|---|
Тема | pgsql: Allow sepgsql labels to depend on object name. |
Дата | |
Msg-id | E1ULIme-0008CS-BX@gemulon.postgresql.org обсуждение исходный текст |
Список | pgsql-committers |
Allow sepgsql labels to depend on object name. The main change here is to call security_compute_create_name_raw() rather than security_compute_create_raw(). This ups the minimum requirement for libselinux from 2.0.99 to 2.1.10, but it looks like most distributions will have picked that up before 9.3 is out. KaiGai Kohei Branch ------ master Details ------- http://git.postgresql.org/pg/commitdiff/0f05840bf4c256b838eca8f1be9d7b5be82ccd0e Modified Files -------------- configure | 24 ++++++++++++------------ configure.in | 4 ++-- contrib/sepgsql/database.c | 3 ++- contrib/sepgsql/expected/label.out | 35 ++++++++++++++++++++++++++++++++--- contrib/sepgsql/proc.c | 3 ++- contrib/sepgsql/relation.c | 9 ++++++--- contrib/sepgsql/schema.c | 13 +++++++++---- contrib/sepgsql/selinux.c | 11 +++++++---- contrib/sepgsql/sepgsql-regtest.te | 17 ++++++++++++++++- contrib/sepgsql/sepgsql.h | 3 ++- contrib/sepgsql/sql/label.sql | 11 ++++++++--- contrib/sepgsql/uavc.c | 4 ++-- doc/src/sgml/sepgsql.sgml | 7 ++++--- 13 files changed, 104 insertions(+), 40 deletions(-)
В списке pgsql-committers по дате отправления: