Re: exposing pg_controldata and pg_config as functions

Поиск
Список
Период
Сортировка
От Peter Eisentraut
Тема Re: exposing pg_controldata and pg_config as functions
Дата
Msg-id 55E50195.6000308@gmx.net
обсуждение исходный текст
Ответ на Re: exposing pg_controldata and pg_config as functions  (Tom Lane <tgl@sss.pgh.pa.us>)
Список pgsql-hackers
On 8/24/15 9:50 AM, Tom Lane wrote:
> Andrew Dunstan <andrew@dunslane.net> writes:
>> On 08/23/2015 08:58 PM, Michael Paquier wrote:
>>> I think that's a good thing to have, now I have concerns about making
>>> this data readable for non-superusers. Cloud deployments of Postgres
>>> are logically going to block the access of this view.
> 
>> I don't think it exposes any information of great security value.
> 
> We just had that kerfuffle about whether WAL compression posed a security
> risk; doesn't that imply that at least the data relevant to WAL position
> has to be unreadable by non-superusers?

We already have functions that expose the current (or recent, or
interesting) WAL position, so any new ones should probably follow the
existing ones.  Or possibly we don't need any new ones, because we
already have enough?




В списке pgsql-hackers по дате отправления:

Предыдущее
От: Peter Eisentraut
Дата:
Сообщение: Re: exposing pg_controldata and pg_config as functions
Следующее
От: Peter Eisentraut
Дата:
Сообщение: Re: exposing pg_controldata and pg_config as functions