Re: Allow 'sslkey' and 'sslcert' in postgres_fdw user mappings

Поиск
Список
Период
Сортировка
От Daniel Gustafsson
Тема Re: Allow 'sslkey' and 'sslcert' in postgres_fdw user mappings
Дата
Msg-id 2AFF8201-A7BD-491B-A118-2E2C290BD981@yesql.se
обсуждение исходный текст
Ответ на Re: Allow 'sslkey' and 'sslcert' in postgres_fdw user mappings  (Andrew Dunstan <andrew.dunstan@2ndquadrant.com>)
Список pgsql-hackers
> On 9 Jan 2020, at 22:38, Andrew Dunstan <andrew.dunstan@2ndquadrant.com> wrote:

> I'm not (yet)
> convinced that there is any significant security threat here. This
> doesn't give the user or indeed any postgres code any access to the
> contents of these files. But if there is a consensus to restrict this
> I'll do it.

I've seen successful exploits made from parts that I in my wildest imagination
couldn't think be useful, so FWIW +1 for adding belts to suspenders and
restricting this.

cheers ./daniel


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: pgsql: Add basic TAP tests for psql's tab-completion logic.
Следующее
От: Tom Lane
Дата:
Сообщение: Re: Allow 'sslkey' and 'sslcert' in postgres_fdw user mappings