Re: How to stop script executions - Mailing list pgsql-general

From Alex Ignatov
Subject Re: How to stop script executions
Date
Msg-id 1b44a56d-d055-e0ad-79ee-51447b742a42@postgrespro.ru
Whole thread Raw
In response to Re: How to stop script executions  ("David G. Johnston" <david.g.johnston@gmail.com>)
Responses Re: How to stop script executions  ("David G. Johnston" <david.g.johnston@gmail.com>)
List pgsql-general

revoke usage on language plpythonu from username;

revoke usage on language plperl(u) from username;

Alex Ignatov
Postgres Professional: http://www.postgrespro.com
The Russian Postgres Company

On 26.07.2016 16:05, David G. Johnston wrote:
On Tue, Jul 26, 2016 at 8:53 AM, Dev Kumkar <devdas.kumkar@gmail.com> wrote:
Hello Experts,

I want to have my postgreSQL database to only execute SQLs and avoid execution of perl and python script executions.

Can you please suggest ways to achieve this?


The way to go about prohibiting their usage altogether is specific to your installation method.  But by default those languages are not installed into newly created databases and only a superuser can "CREATE EXTENSION" so without superuser intervention uses in the database will be unable to create functions in those languages.  If that is an insufficient level of prevention you would have to somehow get your installation of PostgreSQL to not include those core extensions.  I'm pretty sure that during compilation you ​can do this.  For packaged distributions I do not know what all is involved (i.e., what you have to choose to not install).


David J.

pgsql-general by date:

Previous
From: "David G. Johnston"
Date:
Subject: Re: How to stop script executions
Next
From: Dev Kumkar
Date:
Subject: Re: How to stop script executions