sharpetronics/PostgreSQL
1
0
Fork 0
mirror of https://github.com/postgres/postgres.git synced 2025-06-05 00:02:04 -04:00
Code Issues Projects Releases Wiki Activity

A couple more fixes for the sepgsql documentation.

Browse Source
This commit is contained in:
Robert Haas 2012-03-15 16:49:44 -04:00
parent d0ed9efdf7
commit 4012810a68
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
doc/src/sgml/sepgsql.sgml
View File

@ -561,8 +561,8 @@ ERROR: SELinux: security policy violation
</para> </para>
<para> <para>
A combination of dynamic domain transition and trusted procedure A combination of dynamic domain transition and trusted procedure
enables an interesting use case that fits the typical process life- enables an interesting use case that fits the typical process life-cycle
cycle of connection pooling software. of connection pooling software.
Even if your connection pooling software is not allowed to run most Even if your connection pooling software is not allowed to run most
of SQL commands, you can allow it to switch the security label of SQL commands, you can allow it to switch the security label
of the client using the <literal>sepgsql_setcon()</literal> function of the client using the <literal>sepgsql_setcon()</literal> function
@ -576,7 +576,7 @@ ERROR: SELinux: security policy violation
procedure with appropriate permissions checks. procedure with appropriate permissions checks.
The point here is that only the trusted procedure actually has permission The point here is that only the trusted procedure actually has permission
to change the effective security label, and only does so when given proper to change the effective security label, and only does so when given proper
credentials. Of course, for secure operation, the credential store must credentials. Of course, for secure operation, the credential store
(table, procedure definition, or whatever) must be protected from (table, procedure definition, or whatever) must be protected from
unauthorized access. unauthorized access.
</para> </para>