Re: Why is ALLOW_ABSOLUTE_DBPATHS unsafe? - Mailing list pgsql-general

From Thomas Lockhart
Subject Re: Why is ALLOW_ABSOLUTE_DBPATHS unsafe?
Date
Msg-id 3CDFD0DB.F5B132E9@fourpalms.org
Whole thread Raw
In response to Why is ALLOW_ABSOLUTE_DBPATHS unsafe?  ("murphy pope" <pope_murphy@hotmail.com>)
List pgsql-general
> Maybe I'm just not devious enough, but I can't figure out what the risks
> are.  Can anyone enlighten me?

Security issues include allowing non-privileged users access to
uncontrolled areas of storage. A devious non-privileged user might be
able to execute privileged code or otherwise mess around with data.

Data integrity issues include having the DBA lose control over *where*
data in the database is actually located. If a user decides to configure
some tables under /tmp, the DBA will have no way of knowing and will
have no opportunity to help plan the data storage strategy for his
system.

> Also, why are relative DB paths completely disallowed.  I can see that you
> would have to store the location relative to the cluster's path, but I must
> be missing something here too.  Thanks for any ideas.

Same reasons as above.

Database designers and administrators tend to be a suspicious and
paranoid lot. If you don't start out that way, losing data the first
time will make you so ;)

hth

                     - Thomas

pgsql-general by date:

Previous
From: Martijn van Oosterhout
Date:
Subject: Re: Use of OIDS as primary keys
Next
From: Tomas Berndtsson
Date:
Subject: Re: Serious environment problem with 7.2 on Solaris