Re: What is unsecure postgres languages? How to disable them? - Mailing list pgsql-general

From Tino Wildenhain
Subject Re: What is unsecure postgres languages? How to disable them?
Date
Msg-id 4B826CBE.1090706@wildenhain.de
Whole thread Raw
In response to What is unsecure postgres languages? How to disable them?  (dipti shah <shahdipti1980@gmail.com>)
List pgsql-general
Hi,

Am 22.02.2010 11:56, schrieb dipti shah:
> Hi,
> Could anyone please tell me what is unsecure postgres languages(like C,
> pgperl, pgpython??). How to disable them or restrict them only for super
> user?

They are already restricted for the super user because of their
"insecure" nature. That means those languages allow you full access
to the system (and even some innards of postgresql) with the rights
of the postgresql process. You can remove the language handlers:

http://www.postgresql.org/docs/8.1/static/app-droplang.html

If you wish. Apart from that there is no more risk attached to them
unless you are super user or write insecure functions with them
then say with the copy command.

Regards
Tino Wildenhain


Attachment

pgsql-general by date:

Previous
From: Pavel Stehule
Date:
Subject: Re: Questions regarding SET option.
Next
From: Merlin Moncure
Date:
Subject: Re: Asynchronous queries - processing listen (notify) in a procedural language