Re: Is postgres_fdw "safe"? - Mailing list pgsql-general

From Tom Lane
Subject Re: Is postgres_fdw "safe"?
Date
Msg-id 3891974.1697819849@sss.pgh.pa.us
Whole thread Raw
In response to Is postgres_fdw "safe"?  (Marcin Borkowski <mbork@mbork.pl>)
List pgsql-general
Marcin Borkowski <mbork@mbork.pl> writes:
> I noticed that the docs for postgres_fdw lack the clause about it being
> "trusted".  Does that mean that `create extension postgres_fdw` poses
> any known security risks?  If so, what should I do to minimize them?

It's a definitional question I guess.  We don't mark anything trusted
if it can be used to cause outside-the-database effects; and in this
case the ability to connect to other databases qualifies as that.

            regards, tom lane



pgsql-general by date:

Previous
From: Ron
Date:
Subject: Re: Is postgres_fdw "safe"?
Next
From: Justin Clift
Date:
Subject: Re: Driver Postgresql HP-Unix