On Tue, Jul 16, 2013 at 3:14 PM, Markus Wanner <markus@bluegap.ch> wrote:
> But okay, you're saying we *have* and *want* a guarantee that even a
> superuser cannot execute arbitrary native code via libpq (at least in
> default installs w/o extensions).
Yes, that's a good way of summarizing my position. I think I'd
support having an extension that allows that, although I don't think
I'd want such an extension installed on any machine I administer. But
I oppose having it be something the server allows by default. YMMV.
:-)
--
Robert Haas
EnterpriseDB: http://www.enterprisedb.com
The Enterprise PostgreSQL Company