mirror of
https://github.com/postgres/postgres.git
synced 2025-07-27 12:41:57 +03:00
sepgsql, an SE-Linux integration for PostgreSQL
This is still pretty rough - among other things, the documentation needs work, and the messages need a visit from the style police - but this gets the basic framework in place. KaiGai Kohei
This commit is contained in:
Robert Haas
182
contrib/sepgsql/expected/dml.out
Normal file
182
contrib/sepgsql/expected/dml.out
Normal file
@ -0,0 +1,182 @@
|
||||
--
|
||||
-- Regression Test for DML Permissions
|
||||
--
|
||||
--
|
||||
-- Setup
|
||||
--
|
||||
CREATE TABLE t1 (a int, b text);
|
||||
SECURITY LABEL ON TABLE t1 IS 'system_u:object_r:sepgsql_table_t:s0';
|
||||
INSERT INTO t1 VALUES (1, 'aaa'), (2, 'bbb'), (3, 'ccc');
|
||||
CREATE TABLE t2 (x int, y text);
|
||||
SECURITY LABEL ON TABLE t2 IS 'system_u:object_r:sepgsql_ro_table_t:s0';
|
||||
INSERT INTO t2 VALUES (1, 'xxx'), (2, 'yyy'), (3, 'zzz');
|
||||
CREATE TABLE t3 (s int, t text);
|
||||
SECURITY LABEL ON TABLE t3 IS 'system_u:object_r:sepgsql_fixed_table_t:s0';
|
||||
INSERT INTO t3 VALUES (1, 'sss'), (2, 'ttt'), (3, 'uuu');
|
||||
CREATE TABLE t4 (m int, n text);
|
||||
SECURITY LABEL ON TABLE t4 IS 'system_u:object_r:sepgsql_secret_table_t:s0';
|
||||
INSERT INTO t4 VALUES (1, 'mmm'), (2, 'nnn'), (3, 'ooo');
|
||||
CREATE TABLE t5 (e text, f text, g text);
|
||||
SECURITY LABEL ON TABLE t5 IS 'system_u:object_r:sepgsql_table_t:s0';
|
||||
SECURITY LABEL ON COLUMN t5.e IS 'system_u:object_r:sepgsql_table_t:s0';
|
||||
SECURITY LABEL ON COLUMN t5.f IS 'system_u:object_r:sepgsql_ro_table_t:s0';
|
||||
SECURITY LABEL ON COLUMN t5.g IS 'system_u:object_r:sepgsql_secret_table_t:s0';
|
||||
CREATE TABLE customer (cid int primary key, cname text, ccredit text);
|
||||
NOTICE: CREATE TABLE / PRIMARY KEY will create implicit index "customer_pkey" for table "customer"
|
||||
SECURITY LABEL ON COLUMN customer.ccredit IS 'system_u:object_r:sepgsql_secret_table_t:s0';
|
||||
INSERT INTO customer VALUES (1, 'Taro', '1111-2222-3333-4444'),
|
||||
(2, 'Hanako', '5555-6666-7777-8888');
|
||||
CREATE FUNCTION customer_credit(int) RETURNS text
|
||||
AS 'SELECT regexp_replace(ccredit, ''-[0-9]+$'', ''-????'') FROM customer WHERE cid = $1'
|
||||
LANGUAGE sql;
|
||||
SECURITY LABEL ON FUNCTION customer_credit(int)
|
||||
IS 'system_u:object_r:sepgsql_trusted_proc_exec_t:s0';
|
||||
SELECT objtype, objname, label FROM pg_seclabels
|
||||
WHERE provider = 'selinux'
|
||||
AND objtype in ('table', 'column')
|
||||
AND objname in ('t1', 't2', 't3', 't4', 't5', 't5.e', 't5.f', 't5.g');
|
||||
objtype | objname | label
|
||||
---------+---------+---------------------------------------------
|
||||
table | t1 | system_u:object_r:sepgsql_table_t:s0
|
||||
table | t2 | system_u:object_r:sepgsql_ro_table_t:s0
|
||||
table | t3 | system_u:object_r:sepgsql_fixed_table_t:s0
|
||||
table | t4 | system_u:object_r:sepgsql_secret_table_t:s0
|
||||
table | t5 | system_u:object_r:sepgsql_table_t:s0
|
||||
column | t5.g | system_u:object_r:sepgsql_secret_table_t:s0
|
||||
column | t5.f | system_u:object_r:sepgsql_ro_table_t:s0
|
||||
column | t5.e | system_u:object_r:sepgsql_table_t:s0
|
||||
(8 rows)
|
||||
|
||||
-- Hardwired Rules
|
||||
UPDATE pg_attribute SET attisdropped = true
|
||||
WHERE attrelid = 't5'::regclass AND attname = 'f'; -- failed
|
||||
ERROR: selinux: hardwired security policy violation
|
||||
--
|
||||
-- Simple DML statements
|
||||
--
|
||||
SELECT sepgsql_getcon(); -- confirm client privilege
|
||||
sepgsql_getcon
|
||||
-----------------------------------------------------
|
||||
unconfined_u:unconfined_r:sepgsql_regtest_user_t:s0
|
||||
(1 row)
|
||||
|
||||
SELECT * FROM t1; -- ok
|
||||
a | b
|
||||
---+-----
|
||||
1 | aaa
|
||||
2 | bbb
|
||||
3 | ccc
|
||||
(3 rows)
|
||||
|
||||
SELECT * FROM t2; -- ok
|
||||
x | y
|
||||
---+-----
|
||||
1 | xxx
|
||||
2 | yyy
|
||||
3 | zzz
|
||||
(3 rows)
|
||||
|
||||
SELECT * FROM t3; -- ok
|
||||
s | t
|
||||
---+-----
|
||||
1 | sss
|
||||
2 | ttt
|
||||
3 | uuu
|
||||
(3 rows)
|
||||
|
||||
SELECT * FROM t4; -- failed
|
||||
ERROR: SELinux: security policy violation
|
||||
SELECT * FROM t5; -- failed
|
||||
ERROR: SELinux: security policy violation
|
||||
SELECT e,f FROM t5; -- ok
|
||||
e | f
|
||||
---+---
|
||||
(0 rows)
|
||||
|
||||
SELECT * FROM customer; -- failed
|
||||
ERROR: SELinux: security policy violation
|
||||
SELECT cid, cname, customer_credit(cid) FROM customer; -- ok
|
||||
cid | cname | customer_credit
|
||||
-----+--------+---------------------
|
||||
1 | Taro | 1111-2222-3333-????
|
||||
2 | Hanako | 5555-6666-7777-????
|
||||
(2 rows)
|
||||
|
||||
SELECT count(*) FROM t5; -- ok
|
||||
count
|
||||
-------
|
||||
0
|
||||
(1 row)
|
||||
|
||||
SELECT count(*) FROM t5 WHERE g IS NULL; -- failed
|
||||
ERROR: SELinux: security policy violation
|
||||
INSERT INTO t1 VALUES (4, 'abc'); -- ok
|
||||
INSERT INTO t2 VALUES (4, 'xyz'); -- failed
|
||||
ERROR: SELinux: security policy violation
|
||||
INSERT INTO t3 VALUES (4, 'stu'); -- ok
|
||||
INSERT INTO t4 VALUES (4, 'mno'); -- failed
|
||||
ERROR: SELinux: security policy violation
|
||||
INSERT INTO t5 VALUES (1,2,3); -- failed
|
||||
ERROR: SELinux: security policy violation
|
||||
INSERT INTO t5 (e,f) VALUES ('abc', 'def'); -- failed
|
||||
ERROR: SELinux: security policy violation
|
||||
INSERT INTO t5 (e) VALUES ('abc'); -- ok
|
||||
UPDATE t1 SET b = b || '_upd'; -- ok
|
||||
UPDATE t2 SET y = y || '_upd'; -- failed
|
||||
ERROR: SELinux: security policy violation
|
||||
UPDATE t3 SET t = t || '_upd'; -- failed
|
||||
ERROR: SELinux: security policy violation
|
||||
UPDATE t4 SET n = n || '_upd'; -- failed
|
||||
ERROR: SELinux: security policy violation
|
||||
UPDATE t5 SET e = 'xyz'; -- ok
|
||||
UPDATE t5 SET e = f || '_upd'; -- ok
|
||||
UPDATE t5 SET e = g || '_upd'; -- failed
|
||||
ERROR: SELinux: security policy violation
|
||||
DELETE FROM t1; -- ok
|
||||
DELETE FROM t2; -- failed
|
||||
ERROR: SELinux: security policy violation
|
||||
DELETE FROM t3; -- failed
|
||||
ERROR: SELinux: security policy violation
|
||||
DELETE FROM t4; -- failed
|
||||
ERROR: SELinux: security policy violation
|
||||
DELETE FROM t5; -- ok
|
||||
DELETE FROM t5 WHERE f IS NULL; -- ok
|
||||
DELETE FROM t5 WHERE g IS NULL; -- failed
|
||||
ERROR: SELinux: security policy violation
|
||||
--
|
||||
-- COPY TO/FROM statements
|
||||
--
|
||||
COPY t1 TO '/dev/null'; -- ok
|
||||
COPY t2 TO '/dev/null'; -- ok
|
||||
COPY t3 TO '/dev/null'; -- ok
|
||||
COPY t4 TO '/dev/null'; -- failed
|
||||
ERROR: SELinux: security policy violation
|
||||
COPY t5 TO '/dev/null'; -- failed
|
||||
ERROR: SELinux: security policy violation
|
||||
COPY t5(e,f) TO '/dev/null'; -- ok
|
||||
COPY t1 FROM '/dev/null'; -- ok
|
||||
COPY t2 FROM '/dev/null'; -- failed
|
||||
ERROR: SELinux: security policy violation
|
||||
COPY t3 FROM '/dev/null'; -- ok
|
||||
COPY t4 FROM '/dev/null'; -- failed
|
||||
ERROR: SELinux: security policy violation
|
||||
COPY t5 FROM '/dev/null'; -- failed
|
||||
ERROR: SELinux: security policy violation
|
||||
COPY t5 (e,f) FROM '/dev/null'; -- failed
|
||||
ERROR: SELinux: security policy violation
|
||||
COPY t5 (e) FROM '/dev/null'; -- ok
|
||||
--
|
||||
-- Clean up
|
||||
--
|
||||
SELECT sepgsql_getcon(); -- confirm client privilege
|
||||
sepgsql_getcon
|
||||
------------------------------------------------------
|
||||
unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c255
|
||||
(1 row)
|
||||
|
||||
DROP TABLE IF EXISTS t1 CASCADE;
|
||||
DROP TABLE IF EXISTS t2 CASCADE;
|
||||
DROP TABLE IF EXISTS t3 CASCADE;
|
||||
DROP TABLE IF EXISTS t4 CASCADE;
|
||||
DROP TABLE IF EXISTS t5 CASCADE;
|
||||
DROP TABLE IF EXISTS customer CASCADE;
|
||||
109
contrib/sepgsql/expected/label.out
Normal file
109
contrib/sepgsql/expected/label.out
Normal file
@ -0,0 +1,109 @@
|
||||
--
|
||||
-- Regression Tests for Label Management
|
||||
--
|
||||
--
|
||||
-- Setup
|
||||
--
|
||||
CREATE TABLE t1 (a int, b text);
|
||||
INSERT INTO t1 VALUES (1, 'aaa'), (2, 'bbb'), (3, 'ccc');
|
||||
SELECT * INTO t2 FROM t1 WHERE a % 2 = 0;
|
||||
CREATE FUNCTION f1 () RETURNS text
|
||||
AS 'SELECT sepgsql_getcon()'
|
||||
LANGUAGE sql;
|
||||
CREATE FUNCTION f2 () RETURNS text
|
||||
AS 'SELECT sepgsql_getcon()'
|
||||
LANGUAGE sql;
|
||||
SECURITY LABEL ON FUNCTION f2()
|
||||
IS 'system_u:object_r:sepgsql_trusted_proc_exec_t:s0';
|
||||
CREATE FUNCTION f3 () RETURNS text
|
||||
AS 'BEGIN
|
||||
RAISE EXCEPTION ''an exception from f3()'';
|
||||
RETURN NULL;
|
||||
END;' LANGUAGE plpgsql;
|
||||
SECURITY LABEL ON FUNCTION f3()
|
||||
IS 'system_u:object_r:sepgsql_trusted_proc_exec_t:s0';
|
||||
--
|
||||
-- Tests for default labeling behavior
|
||||
--
|
||||
SELECT sepgsql_getcon(); -- confirm client privilege
|
||||
sepgsql_getcon
|
||||
-----------------------------------------------------
|
||||
unconfined_u:unconfined_r:sepgsql_regtest_user_t:s0
|
||||
(1 row)
|
||||
|
||||
CREATE TABLE t3 (s int, t text);
|
||||
INSERT INTO t3 VALUES (1, 'sss'), (2, 'ttt'), (3, 'uuu');
|
||||
SELECT objtype, objname, label FROM pg_seclabels
|
||||
WHERE provider = 'selinux'
|
||||
AND objtype in ('table', 'column')
|
||||
AND objname in ('t1', 't2', 't3');
|
||||
objtype | objname | label
|
||||
---------+---------+-----------------------------------------------
|
||||
table | t1 | unconfined_u:object_r:sepgsql_table_t:s0
|
||||
table | t2 | unconfined_u:object_r:sepgsql_table_t:s0
|
||||
table | t3 | unconfined_u:object_r:user_sepgsql_table_t:s0
|
||||
(3 rows)
|
||||
|
||||
--
|
||||
-- Tests for SECURITY LABEL
|
||||
--
|
||||
SELECT sepgsql_getcon(); -- confirm client privilege
|
||||
sepgsql_getcon
|
||||
----------------------------------------------------
|
||||
unconfined_u:unconfined_r:sepgsql_regtest_dba_t:s0
|
||||
(1 row)
|
||||
|
||||
SECURITY LABEL ON TABLE t1
|
||||
IS 'system_u:object_r:sepgsql_ro_table_t:s0'; -- ok
|
||||
SECURITY LABEL ON TABLE t2
|
||||
IS 'invalid seuciryt context'; -- be failed
|
||||
ERROR: invalid security label: "invalid seuciryt context"
|
||||
SECURITY LABEL ON COLUMN t2
|
||||
IS 'system_u:object_r:sepgsql_ro_table_t:s0'; -- be failed
|
||||
ERROR: improper relation name (too many dotted names):
|
||||
SECURITY LABEL ON COLUMN t2.b
|
||||
IS 'system_u:object_r:sepgsql_ro_table_t:s0'; -- ok
|
||||
--
|
||||
-- Tests for Trusted Procedures
|
||||
--
|
||||
SELECT sepgsql_getcon(); -- confirm client privilege
|
||||
sepgsql_getcon
|
||||
-----------------------------------------------------
|
||||
unconfined_u:unconfined_r:sepgsql_regtest_user_t:s0
|
||||
(1 row)
|
||||
|
||||
SELECT f1(); -- normal procedure
|
||||
f1
|
||||
-----------------------------------------------------
|
||||
unconfined_u:unconfined_r:sepgsql_regtest_user_t:s0
|
||||
(1 row)
|
||||
|
||||
SELECT f2(); -- trusted procedure
|
||||
f2
|
||||
-----------------------------------------------------
|
||||
unconfined_u:unconfined_r:sepgsql_trusted_proc_t:s0
|
||||
(1 row)
|
||||
|
||||
SELECT f3(); -- trusted procedure that raises an error
|
||||
ERROR: an exception from f3()
|
||||
SELECT sepgsql_getcon(); -- client's label must be restored
|
||||
sepgsql_getcon
|
||||
-----------------------------------------------------
|
||||
unconfined_u:unconfined_r:sepgsql_regtest_user_t:s0
|
||||
(1 row)
|
||||
|
||||
--
|
||||
-- Clean up
|
||||
--
|
||||
SELECT sepgsql_getcon(); -- confirm client privilege
|
||||
sepgsql_getcon
|
||||
------------------------------------------------------
|
||||
unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c255
|
||||
(1 row)
|
||||
|
||||
DROP TABLE IF EXISTS t1 CASCADE;
|
||||
DROP TABLE IF EXISTS t2 CASCADE;
|
||||
DROP TABLE IF EXISTS t3 CASCADE;
|
||||
DROP FUNCTION IF EXISTS f1() CASCADE;
|
||||
DROP FUNCTION IF EXISTS f2() CASCADE;
|
||||
DROP FUNCTION IF EXISTS f3() CASCADE;
|
||||
5
contrib/sepgsql/expected/misc.out
Normal file
5
contrib/sepgsql/expected/misc.out
Normal file
@ -0,0 +1,5 @@
|
||||
--
|
||||
-- Regression Test for Misc Permission Checks
|
||||
--
|
||||
LOAD '$libdir/sepgsql'; -- failed
|
||||
ERROR: SELinux: LOAD is not allowed anyway.
|
||||
Reference in New Issue
Block a user