Re: another look at macOS SIP - Mailing list pgsql-hackers

From Andres Freund
Subject Re: another look at macOS SIP
Date
Msg-id 20190917175221.y2aarbkyna3wijqy@alap3.anarazel.de
Whole thread Raw
In response to another look at macOS SIP  (Peter Eisentraut <peter.eisentraut@2ndquadrant.com>)
Responses Re: another look at macOS SIP
Re: another look at macOS SIP
List pgsql-hackers
Hi,

On 2019-09-10 19:14:19 +0200, Peter Eisentraut wrote:
> I think the way forward here is to get rid of all uses of system() for
> calling between PostgreSQL programs.  There are only a handful of those,
> and we already have well-tested replacement code like spawn_process() in
> pg_regress.c that could be used.  (Perhaps we could also use that
> opportunity to get rid of the need for shell quoting?)

Yea, I think that'd be good, regardless of SIP.


> There is a minor second issue, namely that /usr/bin/perl also filters
> out DYLD_* environment variables.  This can be worked around again by
> using a third-party installation of Perl.  You just need to make sure
> that the "prove" program calls that installation instead of the system
> one.  (I just manually edited the shebang line.  There is probably a
> proper way to do it.)

Hm, could we just have perl code set DYLD_* again? I assume we don't
need prove itself to have it set, and for the testscripts we could just
set it in TestLib.pm or such?


Greetings,

Andres Freund



pgsql-hackers by date:

Previous
From: Stephen Frost
Date:
Subject: Re: block-level incremental backup
Next
From: "Jonathan S. Katz"
Date:
Subject: Re: Define jsonpath functions as stable