Re: [GENERAL] SELinux context of PostgreSQL connection process

2015-04-13 Thread Мартынов Александр
If the user is given the necessary permissions, then can the connection process get a context of the user? I mean a category and a level (sensibility) by context. Does the architecture of PostgreSQL permit to add changing a context of a connection process to context of the connecting user? 25.

Re: [GENERAL] SELinux context of PostgreSQL connection process

2015-03-25 Thread Мартынов Александр
If the user is given the necessary rights, then can the connection process get a context of the user? Is there the possibility in principle? 24.03.2015, 21:11, "John R Pierce" : > On 3/24/2015 5:16 AM, Мартынов Александр wrote: >>  There is postgres db with sepgsql enabled. When user connect

Re: [GENERAL] SELinux context of PostgreSQL connection process

2015-03-24 Thread John R Pierce
On 3/24/2015 5:16 AM, Мартынов Александр wrote: There is postgres db with sepgsql enabled. When user connect to postgres db with psql, postgres create new process for each connection. These processes have selinux context unconfined_u:unconfined_r:postgresql_t. Is there a way to assign the proc

[GENERAL] SELinux context of PostgreSQL connection process

2015-03-24 Thread Мартынов Александр
There is postgres db with sepgsql enabled. When user connect to postgres db with psql, postgres create new process for each connection. These processes have selinux context unconfined_u:unconfined_r:postgresql_t. Is there a way to assign the process a context of user that connected to db? --