public inbox for [email protected]
help / color / mirror / Atom feedFrom: Ted X Toth <[email protected]>
To: [email protected]
Subject: Re: [PATCH] Add <<none>> support to sepgsql_restorecon
Date: Tue, 17 Jan 2023 14:59:02 +0000
Message-ID: <167396754287.1137.10261043173596032365.pgcf@coridan.postgresql.org> (raw)
In-Reply-To: <[email protected]>
References: <CAFPpqQH1NHRhbtOBqcXofGHhS6k5-P7H_ZY3na3zYXfW+_b2NA@mail.gmail.com>
<[email protected]>
The intent of this patch is not to stop all relabeling only to stop sepgsql_restorecon from doing a bulk relabel. I believe sepgsql_object_relabel is called by the 'SECURITY LABEL' statement which I'm using to set the label of db objects to a specific context which I would not want altered later by a restorecon. This is particularly important in a MLS (multi-level security) environment where for example if a row were labeled at the 'secret' level I would not restorecon to relabel it possibly causing a downgrade.
The new status of this patch is: Ready for Committer
view thread (2+ messages)
reply
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: [email protected]
Cc: [email protected], [email protected]
Subject: Re: [PATCH] Add <<none>> support to sepgsql_restorecon
In-Reply-To: <167396754287.1137.10261043173596032365.pgcf@coridan.postgresql.org>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox