Re: Giving postgres roles 'sudo'-like access - Mailing list pgsql-admin

From Mario Splivalo
Subject Re: Giving postgres roles 'sudo'-like access
Date
Msg-id 4EF043E1.4010808@megafon.hr
Whole thread Raw
In response to Re: Giving postgres roles 'sudo'-like access  (Craig James <craig_james@emolecules.com>)
List pgsql-admin
On 12/19/2011 07:46 PM, Craig James wrote:
> Backend Postgres processes run as the Postgres user, so they have
> permission to kill each other.  You write an add-on function that just
> kills a process:
>
>   select my_kill_backend(pid);
>
> Naturally, this is very dangerous. There are all sorts of security
> implications.  You want to use signal 2 or 15, not 9.  And so forth.

That 'my_kill_backend' actually calls kill, not pg_cancel/terminate_backend?

I'm thinking into creating this function, and granting particular role
access to it, and then make sure, in the function, that it can kill only
processes 'owned' by that role.

    Mario

pgsql-admin by date:

Previous
From: "Scott Toland"
Date:
Subject: PG export/import encoding issue
Next
From: Greg Smith
Date:
Subject: Re: Giving postgres roles 'sudo'-like access