SELinux and PostgreSQL: a worthwhile union? [LWN.net]

SELinux and PostgreSQL: a worthwhile union?

Posted Dec 7, 2009 2:22 UTC (Mon) by kaigai (subscriber, #12001)
In reply to: SELinux and PostgreSQL: a worthwhile union? by yodermk
Parent article: SELinux and PostgreSQL: a worthwhile union?

> Can anyone give an example of some kind of malicious access that this
> could prevent but the excellent Postgres permission structure could not?

Can the page.24 of this slides help you?
http://sepgsql.googlecode.com/files/JLS2009-KaiGai-LAPP_S...

It allows SELinux to perform a logical-wall to separate each virtual-hosts
in a single tenant. However, it also has flexibility to share partial
tables or files across virtual domains, unlike virtualization.

(Log in to post comments)