Robert Haas
0bf5c548d6
sepgsql: One more getObjectIdentity in lieu of getObjectDescription.
...
KaiGai Kohei, based on a suggestion from Álvaro Herrera
2013-04-17 09:52:59 -04:00
Robert Haas
f8a54e936b
sepgsql: Enforce db_procedure:{execute} permission.
...
To do this, we add an additional object access hook type,
OAT_FUNCTION_EXECUTE.
KaiGai Kohei
2013-04-12 08:58:01 -04:00
Robert Haas
b620fdabba
sepgql: Use getObjectIdentity rather than getObjectDescription.
...
KaiGai Kohei, based on a suggestion from Álvaro Herrera
2013-04-12 08:35:55 -04:00
Robert Haas
0f05840bf4
Allow sepgsql labels to depend on object name.
...
The main change here is to call security_compute_create_name_raw()
rather than security_compute_create_raw(). This ups the minimum
requirement for libselinux from 2.0.99 to 2.1.10, but it looks
like most distributions will have picked that up before 9.3 is out.
KaiGai Kohei
2013-03-28 15:41:38 -04:00
Robert Haas
1cea9bbb21
sepgsql: Support for new post-ALTER access hook.
...
KaiGai Kohei
2013-03-27 08:14:19 -04:00
Bruce Momjian
bd61a623ac
Update copyrights for 2013
...
Fully update git head, and update back branches in ./COPYRIGHT and
legal.sgml files.
2013-01-01 17:15:01 -05:00
Robert Haas
aa2b237ce5
sepgsql cleanups.
...
This is needed to match recent changes elsewhere. Along the way, some
renaming for clarity.
KaiGai Kohei
2012-09-05 14:01:59 -04:00
Bruce Momjian
927d61eeff
Run pgindent on 9.2 source tree in preparation for first 9.3
...
commit-fest.
2012-06-10 15:20:04 -04:00
Robert Haas
e914a144d3
sepgsql DROP support.
...
KaiGai Kohei
2012-03-09 15:18:45 -05:00
Bruce Momjian
e126958c2e
Update copyright notices for year 2012.
2012-01-01 18:01:58 -05:00
Robert Haas
e1042a3484
sepgsql: Check CREATE permissions for some object types.
...
KaiGai Kohei, reviewed by Dimitri Fontaine and me.
2011-12-21 09:14:02 -05:00
Robert Haas
4232c4b406
Userspace access vector cache for contrib/sepgsql.
...
KaiGai Kohei
2011-09-01 08:38:40 -04:00
Bruce Momjian
bf50caf105
pgindent run before PG 9.1 beta 1.
2011-04-10 11:42:00 -04:00
Robert Haas
c7689ee733
Various sepgsql corrections.
...
KaiGai Kohei
2011-02-02 23:39:43 -05:00
Robert Haas
968bc6fac9
sepgsql, an SE-Linux integration for PostgreSQL
...
This is still pretty rough - among other things, the documentation
needs work, and the messages need a visit from the style police -
but this gets the basic framework in place.
KaiGai Kohei
2011-01-23 20:48:27 -05:00
