[refpolicy] services_postgresql.patch

[refpolicy] services_postgresql.patch

[Daniel J Walsh]

http://people.fedoraproject.org/~dwalsh/SELinux/F12/services_postgresql.patch


New config dir, label for init script

connect to postgreql ports, uses pam sends audit messages.

[refpolicy] services_postgresql.patch

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F14/services_postgresql.patch


tmpfs /var/run
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkx25c4ACgkQrlYvE4MpobMoWQCgx5aLh11grYNSWT+aPiCgzKf4
Yd4An1P2nIOwxsDelyPTYzROhvx+Q2mb
=AI32
-----END PGP SIGNATURE-----

[refpolicy] services_postgresql.patch

[Christopher J. PeBenito]

On 08/26/10 18:08, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F14/services_postgresql.patch
>
>
> tmpfs /var/run

Merged.

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com

[refpolicy] services_postgresql.patch

[Daniel J Walsh]

http://people.fedoraproject.org/~dwalsh/SELinux/F13/services_postgresql.patch

File context for /etc/sysconfig/pgsql and other bugs.

Sends audit messages connect to posgresql_server port

Reads its own process info

+        postgresql_signal(rgmanager_t)

[refpolicy] services_postgresql.patch

[Daniel J Walsh]

http://people.fedoraproject.org/~dwalsh/SELinux/F11/services_postgresql.patch

Add _admin interface
Type for init script,

And I believe a couple of transtions to be to proc_t not proc_exec_t

Added a transition on creation of sock_file

[refpolicy] services_postgresql.patch

[KaiGai Kohei]

Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F11/services_postgresql.patch
> 
> Add _admin interface
> Type for init script,
> 
> And I believe a couple of transtions to be to proc_t not proc_exec_t

In the latest refpolicy, sepgsql_proc_t is an alias of sepgsql_proc_exec_t.
Other procedure types also have xxxx_sepgsql_proc_exec_t, so it should
follow the convension.

Thanks,
-- 
KaiGai Kohei <kaigai@kaigai.gr.jp>

[refpolicy] services_postgresql.patch

[Daniel J Walsh]

On 05/22/2009 10:51 AM, KaiGai Kohei wrote:
> Daniel J Walsh wrote:
>> http://people.fedoraproject.org/~dwalsh/SELinux/F11/services_postgresql.patch
>>
>>
>> Add _admin interface
>> Type for init script,
>>
>> And I believe a couple of transtions to be to proc_t not proc_exec_t
>
> In the latest refpolicy, sepgsql_proc_t is an alias of sepgsql_proc_exec_t.
> Other procedure types also have xxxx_sepgsql_proc_exec_t, so it should
> follow the convension.
>
> Thanks,

ok.  Did not make much sense to me, you are creating executables?

[refpolicy] services_postgresql.patch

[KaiGai Kohei]

Daniel J Walsh wrote:
> On 05/22/2009 10:51 AM, KaiGai Kohei wrote:
>> Daniel J Walsh wrote:
>>> http://people.fedoraproject.org/~dwalsh/SELinux/F11/services_postgresql.patch 
>>>
>>>
>>>
>>> Add _admin interface
>>> Type for init script,
>>>
>>> And I believe a couple of transtions to be to proc_t not proc_exec_t
>>
>> In the latest refpolicy, sepgsql_proc_t is an alias of 
>> sepgsql_proc_exec_t.
>> Other procedure types also have xxxx_sepgsql_proc_exec_t, so it should
>> follow the convension.
>>
>> Thanks,
> 
> ok.  Did not make much sense to me, you are creating executables?

Yes, db_procedure class objects are executable stuff.

We assume xxxx_proc_exec_t types are assigned to SQL procedures.
SQL procedures are invoked and executed as a part of SQL query,
and some of them (with sepgsql_trusted_proc_exec_t) can causes
domain transition during execution of the procedure.

It is an analogy of executable programs in database.

Thanks,
-- 
KaiGai Kohei <kaigai@kaigai.gr.jp>

[refpolicy] services_postgresql.patch

[Daniel J Walsh]

http://people.fedoraproject.org/~dwalsh/SELinux/F11/services_postgresql.patch

New interfaces for postgresql

fixes for sepostgresql

[refpolicy] services_postgresql.patch

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F10/services_postgresql.patch

Add initrc script support

allow admin to start/stop service

Admin needs admin_pattern on all file types


New path to log files

Creates a sock_file in /var/run

fixes for sepostgresql

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkjanvAACgkQrlYvE4MpobMBvwCg2StOamKykAQSqgHsdgCyZpUL
8pYAn23x3k/LNjrhxfxMyy0CQSjdrRG+
=nA80
-----END PGP SIGNATURE-----