Re: pg_stat_ssl additions - Mailing list pgsql-hackers

From Peter Eisentraut
Subject Re: pg_stat_ssl additions
Date
Msg-id 1b84688b-92c0-27fb-eba5-975ab2c45574@2ndquadrant.com
Whole thread Raw
In response to Re: pg_stat_ssl additions  (Peter Eisentraut <peter.eisentraut@2ndquadrant.com>)
Responses Re: pg_stat_ssl additions
List pgsql-hackers
Updated patch with the renamed columns.


On 29/11/2018 14:49, Peter Eisentraut wrote:
> On 29/11/2018 01:27, Lou Picciano wrote:
>> Further, I’m not sure exposing details about Cert Issuer, etc. to
>> non-privileged users is much of an issue. For the most part, in most use
>> cases, ‘users’ should//would/ want to know what entity is the issuer. If
>> we’re talking about client certs, most of this is readily readable
>> anyway, no?
> 
> The debate is whether an unprivileged user should be able to read the
> SSL information of *other* users' connections.
> 
> My opinion is no.

I propose to address this as a separate patch later on.

-- 
Peter Eisentraut              http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services

Attachment

pgsql-hackers by date:

Previous
From: Amit Kapila
Date:
Subject: Re: Inadequate executor locking of indexes
Next
From: Tom Lane
Date:
Subject: Re: Bug fix for glibc broke freebsd build in REL_11_STABLE