]> granicus.if.org Git - postgresql/commit
Allow sepgsql labels to depend on object name.
authorRobert Haas <rhaas@postgresql.org>
Thu, 28 Mar 2013 19:38:35 +0000 (15:38 -0400)
committerRobert Haas <rhaas@postgresql.org>
Thu, 28 Mar 2013 19:41:38 +0000 (15:41 -0400)
commit0f05840bf4c256b838eca8f1be9d7b5be82ccd0e
tree33f506bd41aad831419e63885a63a2200706344a
parentae7f1c3ef2eef9584e3c9a42c395eb0c0e59a5ed
Allow sepgsql labels to depend on object name.

The main change here is to call security_compute_create_name_raw()
rather than security_compute_create_raw().  This ups the minimum
requirement for libselinux from 2.0.99 to 2.1.10, but it looks
like most distributions will have picked that up before 9.3 is out.

KaiGai Kohei
13 files changed:
configure
configure.in
contrib/sepgsql/database.c
contrib/sepgsql/expected/label.out
contrib/sepgsql/proc.c
contrib/sepgsql/relation.c
contrib/sepgsql/schema.c
contrib/sepgsql/selinux.c
contrib/sepgsql/sepgsql-regtest.te
contrib/sepgsql/sepgsql.h
contrib/sepgsql/sql/label.sql
contrib/sepgsql/uavc.c
doc/src/sgml/sepgsql.sgml