The ref policy contains a number of sepgsql_ types that are specific to the sepgsql postgresql module. The sepgsql module was written to support a postgresql security patch that was never accepted by the upstream. Now postgresql has gone in a different direction security wise adding row level security (RLS). I've been working on developing RLS policy to label rows on insert and update and to check access perms on select. I've tried using the sepgsql module in the RLS policy but have come to the conclusion that because it was not designed for this purpose it is not usable. So I'd like to suggest that these types be moved out of the postgresql policy possibly into their own module although I personally think they have little if any use. Ted _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
