Re: Is postgres_fdw "safe"?

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: Is postgres_fdw "safe"?
Дата
Msg-id 3891974.1697819849@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Is postgres_fdw "safe"?  (Marcin Borkowski <mbork@mbork.pl>)
Список pgsql-general
Marcin Borkowski <mbork@mbork.pl> writes:
> I noticed that the docs for postgres_fdw lack the clause about it being
> "trusted".  Does that mean that `create extension postgres_fdw` poses
> any known security risks?  If so, what should I do to minimize them?

It's a definitional question I guess.  We don't mark anything trusted
if it can be used to cause outside-the-database effects; and in this
case the ability to connect to other databases qualifies as that.

            regards, tom lane



В списке pgsql-general по дате отправления:

Предыдущее
От: Ron
Дата:
Сообщение: Re: Is postgres_fdw "safe"?
Следующее
От: Justin Clift
Дата:
Сообщение: Re: Driver Postgresql HP-Unix