Re: Permissions on CHECKPOINT - Mailing list pgsql-hackers

From Bruce Momjian
Subject Re: Permissions on CHECKPOINT
Date
Msg-id 200101262317.SAA17184@candle.pha.pa.us
Whole thread Raw
In response to Re: Permissions on CHECKPOINT  ("Oliver Elphick" <olly@lfix.co.uk>)
List pgsql-hackers
> Tom Lane wrote:
>   >Peter Eisentraut <peter_e@gmx.net> writes:
>   >> Mikheev, Vadim writes:
>   >>> Yes, there should be permission checking - I'll add it later (in 7.1)
>   >>> if no one else.
>   >
>   >> Should be simple enough.  Is this okay:
>   >
>   >Actually, I think a more interesting question is "should CHECKPOINT
>   >have permission restrictions?  If so, what should they be?"
>   >
>   >A quite relevant precedent is that Unix systems (at least the ones
>   >I've used) do not restrict who can call sync().
> 
> What about DoS attacks?  What would be the effect of someone's setting
> off an infinite loop of CHECKPOINTs?

Don't we have bigger DoS attacks?  Certainly SELECT cash_out(1) is a
much bigger one.

--  Bruce Momjian                        |  http://candle.pha.pa.us pgman@candle.pha.pa.us               |  (610)
853-3000+  If your life is a hard drive,     |  830 Blythe Avenue +  Christ can be your backup.        |  Drexel Hill,
Pennsylvania19026
 


pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: Bug in FOREIGN KEY
Next
From: Tom Lane
Date:
Subject: Re: postmaster -S will not print an error if pid file exists