Re: [RFC] SELinux and PostgreSQL (draft v2)

[Richard Hally <rhally@mindspring.com>]

Russell Coker wrote:
> On Monday 11 September 2006 04:27, Joshua Brindle <method@gentoo.org> wrote:
>> You can do privilege separation in the database system via process
>> labels instead of only by dbms role. This is analogous to using fine
>> grained types to break up root privileges.
> 
> Which also means that if two domains are not permitted to share data via files 
> on disk then we can also be assured that they can't share data via the 
> database.  As we want to be able to analyse policy and prove that it meets 
> our security goals this is quite important.  Even if two users had different 
> DBMS roles and the SE Linux access controls merely enforced the same access 
> controls as the standard DBMS access control this would provide a benefit 
> that would justify the existence of MAC support in the database for some 
> users.
> 
Thanks guys! It *will* add additional features (e.g. MLS) that are
unlikely to be included in the existing "roles and privileges".
This seems like the perfect use for a user space security server.
Any prognostication as to when that might appear?

Richard


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.