Postgres Pro
Downloads
Home   >   mailing lists

Re: pgsql: Allow 'sslkey' and 'sslcert' in postgres_fdw user mappings - Mailing list pgsql-hackers

From Christoph Berg
Subject Re: pgsql: Allow 'sslkey' and 'sslcert' in postgres_fdw user mappings
Date
Msg-id 20200109143845.GE4192@msg.df7cb.de
Whole thread Raw
In response to Re: pgsql: Allow 'sslkey' and 'sslcert' in postgres_fdw user mappings  (Robert Haas <robertmhaas@gmail.com>)
Responses Re: pgsql: Allow 'sslkey' and 'sslcert' in postgres_fdw user mappings
List pgsql-hackers
Tree view 
Re: Robert Haas 2020-01-09 <CA+TgmoZEjyv_PD=2cinkbDA_chyLNAcBPL_9bKJQ6bc=nw+FHA@mail.gmail.com>
> Does this mean that a non-superuser can induce postgres_fdw to read an
> arbitrary file from the local filesystem?

Yes, see my comments in the "Allow 'sslkey' and 'sslcert' in
postgres_fdw user mappings" thread.

Christoph

pgsql-hackers by date:

Previous
From: ilmari@ilmari.org (Dagfinn Ilmari Mannsåker)
Date:
Subject: Re: Fixing parallel make of libpq
Next
From: Tom Lane
Date:
Subject: Re: [PATCH] Resolve Parallel Hash Join Performance Issue