Re: Disable executing external commands from psql? - Mailing list pgsql-general

From Tom Lane
Subject Re: Disable executing external commands from psql?
Date
Msg-id 14537.1275448959@sss.pgh.pa.us
Whole thread Raw
In response to Re: Disable executing external commands from psql?  (Ken Tanzer <ken.tanzer@gmail.com>)
Responses Re: Disable executing external commands from psql?  (Ken Tanzer <ken.tanzer@gmail.com>)
List pgsql-general
Ken Tanzer <ken.tanzer@gmail.com> writes:
>> You will for example be making it awfully difficult for them to use
>> \copy, \i, \e, \g, the list goes on.

> I'm not really eager to go down this path, but nonetheless it's not
> obvious to me why giving psql a lobotomy (or hopefully a careful
> surgical tweak) to disable the "\!" functionality would impact all those
> other functions.

No, you missed the point: those functions, as well as others, are
useless unless psql is running inside a filesystem that the user has
(easy) read/write access to.  psql is really, really meant to be run
on the client side.

            regards, tom lane

pgsql-general by date:

Previous
From: Ken Tanzer
Date:
Subject: Re: Disable executing external commands from psql?
Next
From: Bruce Momjian
Date:
Subject: Re: server-side extension in c++