Re: [HACKERS] rest of works for security providers in v9.1

2010-12-13 Thread KaiGai Kohei
(2010/12/14 13:31), Robert Haas wrote: > 2010/12/13 KaiGai Kohei: >> (2010/12/14 12:53), Robert Haas wrote: >>> 2010/12/13 KaiGai Kohei: (2010/12/14 12:10), Robert Haas wrote: > 2010/12/13 KaiGai Kohei: >> The starter version is not intended to use in production system, > > Wel

Re: [HACKERS] rest of works for security providers in v9.1

2010-12-13 Thread Robert Haas
2010/12/13 KaiGai Kohei : > (2010/12/14 12:53), Robert Haas wrote: >> 2010/12/13 KaiGai Kohei: >>> (2010/12/14 12:10), Robert Haas wrote: 2010/12/13 KaiGai Kohei: > The starter version is not intended to use in production system, Well, what's the point, then?  I thought we had en

Re: [HACKERS] rest of works for security providers in v9.1

2010-12-13 Thread KaiGai Kohei
(2010/12/14 12:53), Robert Haas wrote: > 2010/12/13 KaiGai Kohei: >> (2010/12/14 12:10), Robert Haas wrote: >>> 2010/12/13 KaiGai Kohei: The starter version is not intended to use in production system, >>> >>> Well, what's the point, then? I thought we had enough infrastructure >>> in place a

Re: [HACKERS] rest of works for security providers in v9.1

2010-12-13 Thread Robert Haas
2010/12/13 KaiGai Kohei : > (2010/12/14 12:10), Robert Haas wrote: >> 2010/12/13 KaiGai Kohei: >>> The starter version is not intended to use in production system, >> >> Well, what's the point, then?  I thought we had enough infrastructure >> in place at this point to build a simple system that, wh

Re: [HACKERS] rest of works for security providers in v9.1

2010-12-13 Thread KaiGai Kohei
(2010/12/14 12:10), Robert Haas wrote: > 2010/12/13 KaiGai Kohei: >> The starter version is not intended to use in production system, > > Well, what's the point, then? I thought we had enough infrastructure > in place at this point to build a simple system that, while it > wouldn't meet every use

Re: [HACKERS] rest of works for security providers in v9.1

2010-12-13 Thread Robert Haas
2010/12/13 KaiGai Kohei : > The starter version is not intended to use in production system, Well, what's the point, then? I thought we had enough infrastructure in place at this point to build a simple system that, while it wouldn't meet every use case, would be useful to some people for limited

Re: [HACKERS] rest of works for security providers in v9.1

2010-12-13 Thread KaiGai Kohei
(2010/12/14 10:41), Robert Haas wrote: > 2010/12/13 KaiGai Kohei: I counted number of lines of the sepgsql module that implement only currently supported hooks. It has 3.2KL of code not. >>> >>> Uh, wow. That's rather surprising. I thought that it would be >>> measured in hundreds of li

Re: [HACKERS] rest of works for security providers in v9.1

2010-12-13 Thread Robert Haas
2010/12/13 KaiGai Kohei : >>> I counted number of lines of the sepgsql module that implement >>> only currently supported hooks. It has 3.2KL of code not. >> >> Uh, wow.  That's rather surprising.  I thought that it would be >> measured in hundreds of lines.  Aren't the hooks that we implemented a

Re: [HACKERS] rest of works for security providers in v9.1

2010-12-13 Thread KaiGai Kohei
(2010/12/14 9:32), Robert Haas wrote: > 2010/12/13 KaiGai Kohei: It is a good news for me also, because I didn't imagine SE-PostgreSQL module getting upstreamed, even if contrib module. OK, I'll focus on the works to merge the starter-version of SE-PostgreSQL as a contrib m

Re: [HACKERS] rest of works for security providers in v9.1

2010-12-13 Thread Robert Haas
2010/12/13 KaiGai Kohei : >>> It is a good news for me also, because I didn't imagine SE-PostgreSQL >>> module getting upstreamed, even if contrib module. >>> >>> OK, I'll focus on the works to merge the starter-version of SE-PostgreSQL >>> as a contrib module in the last commit fest. >>> >>> Proba

Re: [HACKERS] rest of works for security providers in v9.1

2010-12-13 Thread KaiGai Kohei
(2010/12/14 1:03), Robert Haas wrote: > On Mon, Dec 13, 2010 at 8:32 AM, KaiGai Kohei wrote: >> (2010/12/13 21:53), Robert Haas wrote: >>> 2010/12/12 KaiGai Kohei: I'd like to see opinions what facilities should be developed to the current v9.1 development cycle. >>> >>> It seems to

Re: [HACKERS] rest of works for security providers in v9.1

2010-12-13 Thread Robert Haas
On Mon, Dec 13, 2010 at 8:32 AM, KaiGai Kohei wrote: > (2010/12/13 21:53), Robert Haas wrote: >> 2010/12/12 KaiGai Kohei: >>> >>> I'd like to see opinions what facilities should be developed >>> to the current v9.1 development cycle. >> >> It seems to me that the next commit after the label-switch

Re: [HACKERS] rest of works for security providers in v9.1

2010-12-13 Thread KaiGai Kohei
(2010/12/13 21:53), Robert Haas wrote: 2010/12/12 KaiGai Kohei: I'd like to see opinions what facilities should be developed to the current v9.1 development cycle. It seems to me that the next commit after the label-switcher-function patch ought to be a contrib module that implements a basic f

Re: [HACKERS] rest of works for security providers in v9.1

2010-12-13 Thread Robert Haas
2010/12/12 KaiGai Kohei : > I'd like to see opinions what facilities should be developed > to the current v9.1 development cycle. It seems to me that the next commit after the label-switcher-function patch ought to be a contrib module that implements a basic form of SE-Linux driven permissions che

[HACKERS] rest of works for security providers in v9.1

2010-12-12 Thread KaiGai Kohei
I'd like to see opinions what facilities should be developed to the current v9.1 development cycle. We have integrated some of facilities to support a starter- version of SE-PostgreSQL. It allows to hook controls on DML permission checks and assign security labels of client and database obejcts ei