CAcert Code Development list.

[Philipp Gühring <pg AT futureware.at>]

Hello Irigo,

> I think we must take a look at the Security Enhanced PostgreSQL:
> http://selinux-symposium.org/2007/wipsbofs.php
>
> Have you ever tried it?

Ok, I took a look at it now. What it does is that it forwards the 
security-lables (which security clearance the user has) to the PostgreSQL 
database, and then restricting access to the rows/columns based on the 
classification of the data.

It doesn´t solve any of the requirements we have at CAcert, but we might be 
able to use it as a base infrastructure to build our own Security-Enhanced 
version of PostgreSQL, since it´s code is already in the right places to do 
some of our requirements, but we still need a different security model, and a 
lot more.

Best regards,
Philipp Gühring