Re: Securing "make check" (CVE-2014-0067)

Поиск
Список
Период
Сортировка
От james
Тема Re: Securing "make check" (CVE-2014-0067)
Дата
Msg-id 53137E4E.4080108@mansionfamily.plus.com
обсуждение исходный текст
Ответ на Re: Securing "make check" (CVE-2014-0067)  (Magnus Hagander <magnus@hagander.net>)
Ответы Re: Securing "make check" (CVE-2014-0067)  (Stephen Frost <sfrost@snowman.net>)
Список pgsql-hackers
On 02/03/2014 15:30, Magnus Hagander wrote:
> Terminal Services have definitely become more common over time, but 
> with faster and cheaper virtualization, a lot of people have switched 
> to that instead, which would remove the problem of course.
>
> I wonder how common it actually is, though, to *build postgres* on a 
> terminal services machine with other users on it...
>
Well, the banks I've contracted at recently are all rather keen on 
virtual desktops for developers, and some of those are terminal 
services.  We're a headache, and packaging up all the things we need is 
a pain, so there is some mileage in buying grunty servers and doing 
specific installs that are then shared, rather than making an MSI 
generally available.

Also I have experience of being given accounts for jenkins etc that are 
essentially terminal services logins, and having these things unable to 
maintain a software stack can effectively disqualify tech we would 
otherwise use.




В списке pgsql-hackers по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: Securing "make check" (CVE-2014-0067)
Следующее
От: Marko Tiikkaja
Дата:
Сообщение: Re: proposal, patch: allow multiple plpgsql plugins