Re: pgsql: Let installcheck-world pass against a server requiring a passwor
От
Tom Lane
Тема
Re: pgsql: Let installcheck-world pass against a server requiring a passwor
Дата
Msg-id
25848.1403230866@sss.pgh.pa.us
Ответ на
Список
Дерево обсуждения
pgsql: Let installcheck-world pass against a server requiring a
passwor Noah Misch <noah@leadboat.com>
Re: pgsql: Let installcheck-world pass against a server requiring a passwor Tom Lane <tgl@sss.pgh.pa.us>
Re: pgsql: Let installcheck-world pass against a server
requiring a passwor Noah Misch <noah@leadboat.com>
Noah Misch writes: > Let installcheck-world pass against a server requiring a password. > Give passwords to each user created in support of an ECPG connection > test case. Use SET SESSION AUTHORIZATION, not a fresh connection, to > reduce privileges during a dblink test case. Hm ... is this reasonably secure? It seems like it's creating user accounts with well-known passwords. The accounts might not be there for long, but still, I'm not sure I'd care to run this against an installed server on a machine with hostile users present. (The problem might have been there even before your patch, but that doesn't mean it's not a problem.) regards, tom lane
В списке pgsql-committers по дате отправления
От: Tom Lane
Дата:
От: Noah Misch
Дата: