Re: pg_largeobject is a security hole - Mailing list pgsql-hackers

From Philip Warner
Subject Re: pg_largeobject is a security hole
Date
Msg-id 3.0.5.32.20010628091742.0364c220@mail.rhyme.com.au
Whole thread Raw
In response to pg_largeobject is a security hole  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: pg_largeobject is a security hole
List pgsql-hackers
At 12:27 27/06/01 -0400, Tom Lane wrote:
>I propose that initdb should do
>    REVOKE ALL on pg_largeobject FROM public
>

May have an issue with PG_DUMP, which does a 'select oid from
pg_largeobject', I think.


----------------------------------------------------------------
Philip Warner                    |     __---_____
Albatross Consulting Pty. Ltd.   |----/       -  \
(A.B.N. 75 008 659 498)          |          /(@)   ______---_
Tel: (+61) 0500 83 82 81         |                 _________  \
Fax: (+61) 0500 83 82 82         |                 ___________ |
Http://www.rhyme.com.au          |                /           \|                                |    --________--
PGP key available upon request,  |  /
and from pgp5.ai.mit.edu:11371   |/


pgsql-hackers by date:

Previous
From: Peter Eisentraut
Date:
Subject: Re: Re: 7.2 items
Next
From: Tom Lane
Date:
Subject: Re: functions returning records