Horton

Re: 8.4 release planning

Kouhei Kaigai <kaigai@ak.jp.nec.com>

View thread View on postgr.es
From: KaiGai Kohei <kaigai@ak.jp.nec.com>
To: Jaime Casanova <jcasanov@systemguards.com.ec>
Cc: Josh Berkus <josh@agliodbs.com>, "Joshua D. Drake" <jd@commandprompt.com>, Robert Haas <robertmhaas@gmail.com>, Merlin Moncure <mmoncure@gmail.com>, "Jonah H. Harris" <jonah.harris@gmail.com>, Tom Lane <tgl@sss.pgh.pa.us>, Gregory Stark <stark@enterprisedb.com>, Simon Riggs <simon@2ndquadrant.com>, Bruce Momjian <bruce@momjian.us>, Bernd Helmle <mailings@oopsware.de>, Peter Eisentraut <peter_e@gmx.net>, pgsql-hackers@postgresql.org
Date: 2009-01-27T02:17:16Z
Lists: pgsql-hackers 
Jaime Casanova wrote:
>> SE-Linux:  this patch has effectively been in development for 2 years
>> ourside the core process before putting it in; the forked SEPostgres is in
>> use in production. KaiGai has been available for 20 hours a week (or more)
>> to troubleshoot issues and change APIs.  I really don't see what the problem
>> is with committing it.
>>
> 
> it hasn't been testing by ours in different platforms (ie: ubuntu has
> selinux and i want to give it a try, badly enough i have never used
> selinux so this is new to me)...
> 
> nor we have any evidence that it doesn't affect to users that doesn't
> have any variant of selinux (ie: windows)... the real problem here is
> the base of users we enough knowledge of the tool to make some usefull
> tests

It is obvious, if you see the code.
When SELinux is disabled by platform or GUC option, security hooks
works nothing.

Thanks,
-- 
OSS Platform Development Division, NEC
KaiGai Kohei <kaigai@ak.jp.nec.com>