Greetings,
* Nicholas Magann (nmagann@email.arizona.edu) wrote:
> I'm a student at the University of Arizona. My current course is having us
> pick a product and do a Security Assessment on it. Part of the assessment
> requires us to obtain any authorization necessary before doing the
> assessment. Does PostgreSQL require or have any documentation on
> authorization to do our assessment?
You are not required to obtain authorization to perform any kind of
assessment you'd like for PostgreSQL.
In the event that you find issues in PostgreSQL which are not publicly
known, we do ask that report them to security@postgresql.org as
discussed here:
https://www.postgresql.org/support/security/
Thanks!
Stephen
