From: Richard Haines <richard_c_haines@btinternet.com>
To: Peter Whittaker <pww@edgekeep.com>
Cc: selinux@vger.kernel.org
Subject: Re: Bad context in PostgreSQL page on SELinux Project wiki?
Date: Sun, 17 May 2020 12:17:30 +0100 [thread overview]
Message-ID: <55ef0d617fa84d72f142ec0fa6492e5c5e1b1e2b.camel@btinternet.com> (raw)
In-Reply-To: <CAGeouKH0MWHVmo-dFxzn4LViwGNLUoYnYYm6HrKzL5XgfMhd4w@mail.gmail.com>
On Fri, 2020-05-15 at 16:03 -0400, Peter Whittaker wrote:
> Folks, with whom I can verify whether there are errors on the SELinux
> Project Wiki?
You can contact me about any errors in the notebook or on wiki. I've
updated the wiki page and happy to correct any minor errors you find.
I've no plans to do major updates to the wiki as it is now history.
I update the notebook occasionally to keep track of changes for my own
reference, but currently have no plans to publish a new one. If you do
have comments I'm happy to take them onboard, however no guarantees to
publish.
>
> Details: It looks like MCS information is missing from a few security
> contexts on https://selinuxproject.org/page/NB_SQL_9.3
>
> The schema row has
>
> security_label = 'unconfined_u:object_r:sepgsql_schema_t:s10'
>
> which should likely be
>
> security_label = 'unconfined_u:object_r:sepgsql_schema_t:s0:c10'
>
> Likewise, the database row has
>
> context = 'unconfined_u:object_r:postgresql_db_t:s0'
>
> but I'm unsure whether this should be as is or whether it should also
> have MCS info.
I think Stephen's reply covered the MCS query.
BTW the contexts match those in the tarball example, the testdb-
example.sql is correct, however the instructions in the README will not
work on version 11. If your interested I can send you an updated
README, however no plans to update online.
>
> With whom can I verify this? (Not using PostgreSQL, just noticing
> errors as I crawl through my hardcopy of the handbook.)
>
> Thanks!
>
> P
>
> Peter Whittaker
> EdgeKeep Inc.
> www.edgekeep.com
> +1 613 864 5337
> +1 613 864 KEEP
next prev parent reply other threads:[~2020-05-17 11:17 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-05-15 20:03 Bad context in PostgreSQL page on SELinux Project wiki? Peter Whittaker
2020-05-15 20:20 ` Stephen Smalley
2020-05-15 21:13 ` Peter Whittaker
2020-05-17 11:17 ` Richard Haines [this message]
2020-05-17 21:59 ` Paul Moore
2020-05-19 13:50 ` Richard Haines
2020-05-19 21:40 ` Paul Moore
2020-05-21 8:57 ` Richard Haines
2020-05-22 16:10 ` Paul Moore
2020-05-22 16:12 ` Paul Moore
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=55ef0d617fa84d72f142ec0fa6492e5c5e1b1e2b.camel@btinternet.com \
--to=richard_c_haines@btinternet.com \
--cc=pww@edgekeep.com \
--cc=selinux@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).