Re: Facility for detecting insecure object naming

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: Facility for detecting insecure object naming
Дата
Msg-id 32760.1533741090@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: Facility for detecting insecure object naming  (Mark Dilger <hornschnorter@gmail.com>)
Список pgsql-hackers
Mark Dilger <hornschnorter@gmail.com> writes:
> On Aug 8, 2018, at 7:47 AM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
>> The advantage of a function trust mechanism is that it'd provide
>> security against calling functions you didn't intend to without
>> any visible changes in normal application behavior.  The security
>> team gave up on that approach because it seemed too complicated to
>> pursue as a secretly-developed security patch, but I still think
>> it's the right long-term answer.

> Do you have a WIP patch partially developed for this?  If it is no
> longer secret, perhaps the rest of us could take a look?

Yeah, I do have a POC prototype, let me blow the dust off it ...

            regards, tom lane


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Alvaro Herrera
Дата:
Сообщение: Re: Typo in doc or wrong EXCLUDE implementation
Следующее
От: "Bossart, Nathan"
Дата:
Сообщение: Re: Improve behavior of concurrent TRUNCATE