Re: let's disallow ALTER ROLE bootstrap_superuser NOSUPERUSER
От | Nathan Bossart |
---|---|
Тема | Re: let's disallow ALTER ROLE bootstrap_superuser NOSUPERUSER |
Дата | |
Msg-id | 20220721172726.GA3779763@nathanxps13 обсуждение исходный текст |
Ответ на | Re: let's disallow ALTER ROLE bootstrap_superuser NOSUPERUSER (Tom Lane <tgl@sss.pgh.pa.us>) |
Ответы |
Re: let's disallow ALTER ROLE bootstrap_superuser NOSUPERUSER
|
Список | pgsql-hackers |
On Thu, Jul 21, 2022 at 01:02:50PM -0400, Tom Lane wrote: > Robert Haas <robertmhaas@gmail.com> writes: >> ... if >> we want to regard no-superusers as a supported configuration, we >> probably need to tighten that up. I think it's kind of hopeless, > > Yeah, I agree. At least, I'm uninterested in spending any of my > own time trying to make that usefully-more-secure than it is today. > If somebody else is interested enough to do the legwork, we can > look at what they come up with. Given the current assumptions the code makes about the bootstrap superuser, I think it makes sense to disallow removing its superuser attribute (at least via ALTER ROLE NOSUPERUSER). It seems like there is much work to do before a no-superuser configuration could be formally supported. If/when such support materializes, it might be possible to remove the restriction that Robert is proposing. -- Nathan Bossart Amazon Web Services: https://aws.amazon.com
В списке pgsql-hackers по дате отправления: