Re: Securing "make check" (CVE-2014-0067) - Mailing list pgsql-hackers

From james
Subject Re: Securing "make check" (CVE-2014-0067)
Date
Msg-id 53137E4E.4080108@mansionfamily.plus.com
Whole thread Raw
In response to Re: Securing "make check" (CVE-2014-0067)  (Magnus Hagander <magnus@hagander.net>)
Responses Re: Securing "make check" (CVE-2014-0067)  (Stephen Frost <sfrost@snowman.net>)
List pgsql-hackers
On 02/03/2014 15:30, Magnus Hagander wrote:
> Terminal Services have definitely become more common over time, but 
> with faster and cheaper virtualization, a lot of people have switched 
> to that instead, which would remove the problem of course.
>
> I wonder how common it actually is, though, to *build postgres* on a 
> terminal services machine with other users on it...
>
Well, the banks I've contracted at recently are all rather keen on 
virtual desktops for developers, and some of those are terminal 
services.  We're a headache, and packaging up all the things we need is 
a pain, so there is some mileage in buying grunty servers and doing 
specific installs that are then shared, rather than making an MSI 
generally available.

Also I have experience of being given accounts for jenkins etc that are 
essentially terminal services logins, and having these things unable to 
maintain a software stack can effectively disqualify tech we would 
otherwise use.




pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: Securing "make check" (CVE-2014-0067)
Next
From: Marko Tiikkaja
Date:
Subject: Re: proposal, patch: allow multiple plpgsql plugins