From 1cea9bbb21e9e90dc7085ce605d9160e7161fa58 Mon Sep 17 00:00:00 2001
From: Robert Haas
Date: Wed, 27 Mar 2013 08:10:14 -0400
Subject: sepgsql: Support for new post-ALTER access hook.

KaiGai Kohei
---
 contrib/sepgsql/database.c | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)

(limited to 'contrib/sepgsql/database.c')

diff --git a/contrib/sepgsql/database.c b/contrib/sepgsql/database.c
index 975c1d47958..64d37a3ca99 100644
--- a/contrib/sepgsql/database.c
+++ b/contrib/sepgsql/database.c
@@ -148,6 +148,33 @@ sepgsql_database_drop(Oid databaseId)
 	pfree(audit_name);
 }
 
+/*
+ * sepgsql_database_post_alter
+ *
+ * It checks privileges to alter the supplied database
+ */
+void
+sepgsql_database_setattr(Oid databaseId)
+{
+	ObjectAddress object;
+	char	   *audit_name;
+
+	/*
+	 * check db_database:{setattr} permission
+	 */
+	object.classId = DatabaseRelationId;
+	object.objectId = databaseId;
+	object.objectSubId = 0;
+	audit_name = getObjectDescription(&object);
+
+	sepgsql_avc_check_perms(&object,
+							SEPG_CLASS_DB_DATABASE,
+							SEPG_DB_DATABASE__SETATTR,
+							audit_name,
+							true);
+	pfree(audit_name);
+}
+
 /*
  * sepgsql_database_relabel
  *
-- 
cgit v1.2.3