Re: Remote administration contrib module - Mailing list pgsql-hackers

From Peter Eisentraut
Subject Re: Remote administration contrib module
Date
Msg-id 200604102343.00441.peter_e@gmx.net
Whole thread Raw
In response to Re: Remote administration contrib module  (Bruce Momjian <pgman@candle.pha.pa.us>)
Responses Re: Remote administration contrib module
List pgsql-hackers
Bruce Momjian wrote:
> I think the issue was that adding these fuctions adds a potential
> security opening, so we didn't want it in core by default, but
> /contrib seems logical because anyone who needs it can just add it.

Well, if there are security issues, then this is a poor fix.  A lot of 
people use pgAdmin, many of them less experienced with PostgreSQL, so 
before long all of these functions are going to be installed at many 
sites anyway.  If there are _security_ issues, they need to be fixed 
before things go into contrib.

> This is similar to the fact we don't include plpgsql by default in
> databases, for the same reason,

I doubt that that is really the reason.

-- 
Peter Eisentraut
http://developer.postgresql.org/~petere/


pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: Domains as Subtypes
Next
From: Bruce Momjian
Date:
Subject: Re: Remote administration contrib module