Re: [GENERAL] sepgsql where are the security labels

2014-11-13 Thread Adrian Klaver
On 11/13/2014 07:37 AM, Ted Toth wrote: Exactly what I talking about ... but unfortunately that appears to have been based on KaiGai's branch and is not in 9.3. The current discuss/work is around row-level-security with patches to 9.5 which is not much help to me now :( Then my previous post w

Re: [GENERAL] sepgsql where are the security labels

2014-11-13 Thread Ted Toth
Exactly what I talking about ... but unfortunately that appears to have been based on KaiGai's branch and is not in 9.3. The current discuss/work is around row-level-security with patches to 9.5 which is not much help to me now :( On Thu, Nov 13, 2014 at 9:26 AM, Adrian Klaver wrote: > On 11/13/2

Re: [GENERAL] sepgsql where are the security labels

2014-11-13 Thread Adrian Klaver
On 11/13/2014 05:58 AM, Ted Toth wrote: This table maintains information about the context of postgresql objects not the data in tables. To follow up, an expanded explanation of the security_label column: https://wiki.postgresql.org/wiki/SEPostgreSQL_Architecture#The_security_label_system_col

Re: [GENERAL] sepgsql where are the security labels

2014-11-13 Thread Adrian Klaver
On 11/13/2014 05:58 AM, Ted Toth wrote: This table maintains information about the context of postgresql objects not the data in tables. http://www.slideshare.net/kaigai/label-based-mandatory-access-control-on-postgresql Slide 23 On Wed, Nov 12, 2014 at 5:56 PM, Adrian Klaver wrote: On

Re: [GENERAL] sepgsql where are the security labels

2014-11-13 Thread Ted Toth
This table maintains information about the context of postgresql objects not the data in tables. On Wed, Nov 12, 2014 at 5:56 PM, Adrian Klaver wrote: > On 11/12/2014 02:45 PM, Ted Toth wrote: >> >> I'm running selinux mls policy I've got labeled ipsec working and my >> postgresql configured to l

Re: [GENERAL] sepgsql where are the security labels

2014-11-12 Thread Adrian Klaver
On 11/12/2014 02:45 PM, Ted Toth wrote: I'm running selinux mls policy I've got labeled ipsec working and my postgresql configured to load sepgsql. I've created a db, run the sepgsql.sql script on it, created tables and inserted data. How do I query the security labels on the data? I do not use

[GENERAL] sepgsql where are the security labels

2014-11-12 Thread Ted Toth
I'm running selinux mls policy I've got labeled ipsec working and my postgresql configured to load sepgsql. I've created a db, run the sepgsql.sql script on it, created tables and inserted data. How do I query the security labels on the data? As best I can tell there is no security_context column o