On Fri, Dec 11, 2009 at 05:45, Tom Lane <[email protected]> wrote: > Robert Haas <[email protected]> writes: >> On Thu, Dec 10, 2009 at 5:08 PM, Tom Lane <[email protected]> wrote: >>> My guess is that a credible SEPostgres offering will require a long-term >>> amount of work at least equal to, and very possibly a good deal more >>> than, what it took to make a native Windows port. > >> The SEPostgres community is surely a lot smaller than the Windows >> community, but I'm not sure whether the effort estimate is accurate or >> not. If "credible" includes "row-level security", then I think I >> might agree, but right now we're just trying to get off the ground. > > It's been perfectly clear since day one, and was reiterated as recently > as today > http://archives.postgresql.org/message-id/[email protected] > that what the security community wants is row-level security. The
If that is true, then shouldn't we have an implementation of row level security *first*, and then an implementation of selinux hooks that work with this row level security feature? Rather than first doing selinux hooks, then row level security, which will likely need new and/or changed hooks... I'm not convinced that row level security is actually that necessary (though it's a nice feature, with or without selinux), but if it is, it seems we are approaching the problem from the wrong direction. -- Magnus Hagander Me: http://www.hagander.net/ Work: http://www.redpill-linpro.com/ -- Sent via pgsql-hackers mailing list ([email protected]) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers
