On Thu, 2003-06-26 at 11:59, Tom Lane wrote:
> DeJuan Jackson <djackson@speedfc.com> writes:
> > Just wondering (I don't use or intend to use plpython), but why does it
> > need to be marked untrusted is the rexec code has been corrected.
>
> Now that the rexec code is gone, it MUST be marked untrusted --- this is
> not a question for debate. Installing it as trusted would be a security
> hole.
In what version is rexec removed? v2.3? If so, then there are
many people with Python 2.2 and even 2.1 who could still use
trusted PlPython.
--
+-----------------------------------------------------------+
| Ron Johnson, Jr. Home: ron.l.johnson@cox.net |
| Jefferson, LA USA http://members.cox.net/ron.l.johnson |
| |
| "Oh, great altar of passive entertainment, bestow upon me |
| thy discordant images at such speed as to render linear |
| thought impossible" (Calvin, regarding TV) |
+-----------------------------------------------------------