Re: [HACKERS] GUC --- prevent non-super user changes - Mailing list pgsql-patches

From Robert Treat
Subject Re: [HACKERS] GUC --- prevent non-super user changes
Date
Msg-id 1055369568.7086.98.camel@camel
Whole thread Raw
List pgsql-patches
On Wed, 2003-06-11 at 01:01, Bruce Momjian wrote:
> Here is a proposed fix for the new SUSET of various variables.  The
> solution is to create a new GUC context called PGC_USERLIMIT, which
> limits changes by non-super users.  For example, non-super users can
> turn on logging, but can't turn it off, and log_min_* logging can have
> added output, but not less output.
>

Is there a danger here that users can crank logging up to the max and
either crash a server due to i/o load, or perhaps create enough "noise"
to cover tracks of something malicious?

Robert Treat
--
Build A Brighter Lamp :: Linux Apache {middleware} PostgreSQL


pgsql-patches by date:

Previous
From: Bruce Momjian
Date:
Subject: Re: Simple LRU for clog and (later) subtrans
Next
From: Josh Berkus
Date:
Subject: Re: [HACKERS] "Adding missing from clause" (replacement)