Allow sepgsql labels to depend on object name. The main change here is to call security_compute_create_name_raw() rather than security_compute_create_raw(). This ups the minimum requirement for libselinux from 2.0.99 to 2.1.10, but it looks like most distributions will have picked that up before 9.3 is out.
KaiGai Kohei Branch ------ master Details ------- http://git.postgresql.org/pg/commitdiff/0f05840bf4c256b838eca8f1be9d7b5be82ccd0e Modified Files -------------- configure | 24 ++++++++++++------------ configure.in | 4 ++-- contrib/sepgsql/database.c | 3 ++- contrib/sepgsql/expected/label.out | 35 ++++++++++++++++++++++++++++++++--- contrib/sepgsql/proc.c | 3 ++- contrib/sepgsql/relation.c | 9 ++++++--- contrib/sepgsql/schema.c | 13 +++++++++---- contrib/sepgsql/selinux.c | 11 +++++++---- contrib/sepgsql/sepgsql-regtest.te | 17 ++++++++++++++++- contrib/sepgsql/sepgsql.h | 3 ++- contrib/sepgsql/sql/label.sql | 11 ++++++++--- contrib/sepgsql/uavc.c | 4 ++-- doc/src/sgml/sepgsql.sgml | 7 ++++--- 13 files changed, 104 insertions(+), 40 deletions(-) -- Sent via pgsql-committers mailing list (pgsql-committers@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-committers
