Allow sepgsql labels to depend on object name.
Robert Haas <rhaas@postgresql.org>
Allow sepgsql labels to depend on object name. The main change here is to call security_compute_create_name_raw() rather than security_compute_create_raw(). This ups the minimum requirement for libselinux from 2.0.99 to 2.1.10, but it looks like most distributions will have picked that up before 9.3 is out. KaiGai Kohei
Files
| Path | Change | +/− |
|---|---|---|
| configure | modified | +12 −12 |
| configure.in | modified | +2 −2 |
| contrib/sepgsql/database.c | modified | +2 −1 |
| contrib/sepgsql/expected/label.out | modified | +32 −3 |
| contrib/sepgsql/proc.c | modified | +2 −1 |
| contrib/sepgsql/relation.c | modified | +6 −3 |
| contrib/sepgsql/schema.c | modified | +9 −4 |
| contrib/sepgsql/selinux.c | modified | +7 −4 |
| contrib/sepgsql/sepgsql.h | modified | +2 −1 |
| contrib/sepgsql/sepgsql-regtest.te | modified | +16 −1 |
| contrib/sepgsql/sql/label.sql | modified | +8 −3 |
| contrib/sepgsql/uavc.c | modified | +2 −2 |
| doc/src/sgml/sepgsql.sgml | modified | +4 −3 |