| From: | KaiGai Kohei <kaigai(at)kaigai(dot)gr(dot)jp> |
|---|---|
| To: | Peter Eisentraut <peter_e(at)gmx(dot)net> |
| Cc: | pgsql-hackers(at)postgresql(dot)org, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Bruce Momjian <bruce(at)momjian(dot)us>, KaiGai Kohei <kaigai(at)ak(dot)jp(dot)nec(dot)com> |
| Subject: | Re: Updates of SE-PostgreSQL 8.4devel patches (r1268) |
| Date: | 2008-12-11 16:24:54 |
| Message-ID: | 49413ED6.5030306@kaigai.gr.jp |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
Peter Eisentraut wrote:
> On Thursday 11 December 2008 17:09:25 Tom Lane wrote:
>> I think there should be only *one* underlying column and that it should
>> be manipulable by either SQL commands or selinux. Otherwise you're
>> making a lie of the primary argument for having the SQL feature at all.
>
> Well, an SQL-manipulated row security column will probably have a content like
>
> {joe=rw/bob,staff=r/bob}
>
> An SELinux-aware row security column will probably have a content like
>
> blah_t:foo_t:quux_t
>
> And a Solaris TX-aware security column will probably have a content like
>
> Classified
>
> How can we stick all of these in the same column at the same time?
To choose it on compile-time option is the most simple approach.
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Peter Eisentraut | 2008-12-11 16:29:07 | Re: Updates of SE-PostgreSQL 8.4devel patches (r1268) |
| Previous Message | Pavel Stehule | 2008-12-11 16:20:57 | Re: COCOMO & Indians |