Re: Adding support for SE-Linux security

From: Josh Berkus <josh(at)agliodbs(dot)com>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: Bruce Momjian <bruce(at)momjian(dot)us>, KaiGai Kohei <kaigai(at)ak(dot)jp(dot)nec(dot)com>, jd(at)commandprompt(dot)com, David Fetter <david(at)fetter(dot)org>, Itagaki Takahiro <itagaki(dot)takahiro(at)oss(dot)ntt(dot)co(dot)jp>, KaiGai Kohei <kaigai(at)kaigai(dot)gr(dot)jp>, pgsql-hackers(at)postgresql(dot)org
Subject: Re: Adding support for SE-Linux security
Date: 2009-12-03 22:23:34
Message-ID: 4B183A66.8020002@agliodbs.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers


> In words of one syllable: I do not care at all whether the NSA would use
> Postgres, if they're not willing to come and help us build it.

There's several 2-syllable words there. ;-)

If we
> tried to build it without their input, we'd probably not produce what
> they want anyway.

Yeah, the *complete* lack of input/help from the security community
aside from the occasional "SE Linux good" posts we've gotten is
troubling. We could end up with a SQL-J.

Kaigai, you've said that you could get SELinux folks involved in the
patch review. I think it's past time that they were; please solicit them.

--Josh Berkus

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Josh Berkus 2009-12-03 22:46:45 Re: Ragged CSV import
Previous Message Bruce Momjian 2009-12-03 21:46:23 Re: Adding support for SE-Linux security