Postgres Pro
Downloads
Home   >   mailing lists

Why are absolute paths considered a security risk? - Mailing list pgsql-general

From Hadley Willan
Subject Why are absolute paths considered a security risk?
Date
Msg-id 1046056664.1725.9.camel@atlas.sol.deeper.co.nz
Whole thread Raw
List pgsql-general
Tree view 
The documentation (7.2.1) mentions that allowing absolute paths when
creating a db is a security risk and is off by default.

However, it seems fairly hard to exploit, and I was wondering if anybody
has any examples of how much of a risk this is?

Thank You.
--
Hadley Willan > Systems Development > Deeper Design Limited. +64(7)377-3328
hadley.willan@deeperdesign.co.nz > www.deeperdesign.com > +64(21)-28-41-463
Level 1, 4 Tamamutu St, PO Box 90, TAUPO 2730, New Zealand.

pgsql-general by date:

Previous
From: Curt Sampson
Date:
Subject: Re: cluster questions
Next
From: Simon Mitchell
Date:
Subject: Status of tablespaces