Horton

Re: 8.4 release planning

Stephen Frost <sfrost@snowman.net>

View thread View on postgr.es
From: Stephen Frost <sfrost@snowman.net>
To: Joshua Brindle <method@manicmethod.com>
Cc: Tom Lane <tgl@sss.pgh.pa.us>, Josh Berkus <josh@agliodbs.com>, Gregory Stark <stark@enterprisedb.com>, Robert Haas <robertmhaas@gmail.com>, Simon Riggs <simon@2ndQuadrant.com>, Ron Mayer <rm_pg@cheapcomplexdevices.com>, "Joshua D. Drake" <jd@commandprompt.com>, Merlin Moncure <mmoncure@gmail.com>, "Jonah H. Harris" <jonah.harris@gmail.com>, Bruce Momjian <bruce@momjian.us>, Bernd Helmle <mailings@oopsware.de>, Peter Eisentraut <peter_e@gmx.net>, pgsql-hackers@postgresql.org
Date: 2009-01-27T19:55:54Z
Lists: pgsql-hackers 
* Joshua Brindle (method@manicmethod.com) wrote:
> They are separate. If you look at the patches you'll see a pgace part, 
> this is where the core interfaces to the security backends, and you'll 
> see a rowacl backend and an sepgsql backend.

Right, guess it wasn't clear to me that the PGACE bits for row-level
access control could be used independently of SELinux (and maybe even on
systems that don't have SELinux..?).

> Personally I'd like to see all of the access control moved out to use 
> pgace, including the standard DAC permissions but I doubt that would 
> never happen.

Yeah...  That's a whole 'nother discussion.

	Stephen