7 Commits (034510c820cd75e0410332d92b4967ef9b844936)

Author	SHA1	Message	Date
Joe Conway	4f66c93f61	Update sepgsql to add mandatory access control for TRUNCATE ... Use SELinux "db_table: { truncate }" to check if permission is granted to TRUNCATE. Update example SELinux policy to grant needed permission for TRUNCATE. Add new regression test to demonstrate a positive and negative cases. Test will only be run if the loaded SELinux policy has the "db_table: { truncate }" permission. Makes use of recent commit which added object TRUNCATE hook. Patch by Yuli Khodorkovskiy with minor editorialization by me. Not back-patched because the object TRUNCATE hook was not. Author: Yuli Khodorkovskiy Reviewed-by: Joe Conway Discussion: https://postgr.es/m/CAFL5wJcomybj1Xdw7qWmPJRpGuFukKgNrDb6uVBaCMgYS9dkaA%40mail.gmail.com	6 years ago
Tom Lane	870df2b3b7	Fix omission of -X (--no-psqlrc) in some psql invocations. ... As of commit d5563d7df, psql -c no longer implies -X, but not all of our regression testing scripts had gotten that memo. To ensure consistency of results across different developers, make sure that *all* invocations of psql in all scripts in our tree use -X, even where this is not what previously happened. Michael Paquier and Tom Lane	10 years ago
Robert Haas	f050457978	sepgsql: Minor improvement to test script, doc fix. ... KaiGai Kohei	13 years ago
Robert Haas	1cea9bbb21	sepgsql: Support for new post-ALTER access hook. ... KaiGai Kohei	13 years ago
Robert Haas	e914a144d3	sepgsql DROP support. ... KaiGai Kohei	14 years ago
Robert Haas	e1042a3484	sepgsql: Check CREATE permissions for some object types. ... KaiGai Kohei, reviewed by Dimitri Fontaine and me.	14 years ago
Tom Lane	cc4ff8742b	Take sepgsql regression tests out of the regular regression test mechanism. ... Because these tests require root privileges, not to mention invasive changes to the security configuration of the host system, it's not reasonable for them to be invoked by a regular "make check" or "make installcheck". Instead, dike out the Makefile's knowledge of the tests, and change chkselinuxenv (now renamed "test_sepgsql") into a script that verifies the environment is workable and then runs the tests. It's expected that test_sepgsql will only be run manually. While at it, do some cleanup in the error checking in the script, and do some wordsmithing in the documentation.	14 years ago