Re: exposing pg_controldata and pg_config as functions - Mailing list pgsql-hackers

From Peter Eisentraut
Subject Re: exposing pg_controldata and pg_config as functions
Date
Msg-id 55E50195.6000308@gmx.net
Whole thread Raw
In response to Re: exposing pg_controldata and pg_config as functions  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-hackers
On 8/24/15 9:50 AM, Tom Lane wrote:
> Andrew Dunstan <andrew@dunslane.net> writes:
>> On 08/23/2015 08:58 PM, Michael Paquier wrote:
>>> I think that's a good thing to have, now I have concerns about making
>>> this data readable for non-superusers. Cloud deployments of Postgres
>>> are logically going to block the access of this view.
> 
>> I don't think it exposes any information of great security value.
> 
> We just had that kerfuffle about whether WAL compression posed a security
> risk; doesn't that imply that at least the data relevant to WAL position
> has to be unreadable by non-superusers?

We already have functions that expose the current (or recent, or
interesting) WAL position, so any new ones should probably follow the
existing ones.  Or possibly we don't need any new ones, because we
already have enough?




pgsql-hackers by date:

Previous
From: Peter Eisentraut
Date:
Subject: Re: exposing pg_controldata and pg_config as functions
Next
From: Peter Eisentraut
Date:
Subject: Re: exposing pg_controldata and pg_config as functions