From 523176cbf14a3414170a83dd43686c0eccdc61c6 Mon Sep 17 00:00:00 2001 From: Robert Haas Date: Thu, 15 Mar 2012 16:08:40 -0400 Subject: sepgsql_setcon(). This is intended as infrastructure to allow sepgsql to cooperate with connection pooling software, by allowing the effective security label to be set for each new connection. KaiGai Kohei, reviewed by Yeb Havinga. --- contrib/sepgsql/sepgsql.h | 3 +++ 1 file changed, 3 insertions(+) (limited to 'contrib/sepgsql/sepgsql.h') diff --git a/contrib/sepgsql/sepgsql.h b/contrib/sepgsql/sepgsql.h index 0100a09d49b..708d4ee6563 100644 --- a/contrib/sepgsql/sepgsql.h +++ b/contrib/sepgsql/sepgsql.h @@ -57,6 +57,8 @@ * Internally used code of access vectors */ #define SEPG_PROCESS__TRANSITION (1<<0) +#define SEPG_PROCESS__DYNTRANSITION (1<<1) +#define SEPG_PROCESS__SETCURRENT (1<<2) #define SEPG_FILE__READ (1<<0) #define SEPG_FILE__WRITE (1<<1) @@ -274,6 +276,7 @@ extern void sepgsql_object_relabel(const ObjectAddress *object, const char *seclabel); extern Datum sepgsql_getcon(PG_FUNCTION_ARGS); +extern Datum sepgsql_setcon(PG_FUNCTION_ARGS); extern Datum sepgsql_mcstrans_in(PG_FUNCTION_ARGS); extern Datum sepgsql_mcstrans_out(PG_FUNCTION_ARGS); extern Datum sepgsql_restorecon(PG_FUNCTION_ARGS); -- cgit v1.2.3