Re: let's disallow ALTER ROLE bootstrap_superuser NOSUPERUSER - Mailing list pgsql-hackers

From Tom Lane
Subject Re: let's disallow ALTER ROLE bootstrap_superuser NOSUPERUSER
Date
Msg-id 75372.1658422970@sss.pgh.pa.us
Whole thread Raw
In response to Re: let's disallow ALTER ROLE bootstrap_superuser NOSUPERUSER  (Robert Haas <robertmhaas@gmail.com>)
Responses Re: let's disallow ALTER ROLE bootstrap_superuser NOSUPERUSER
List pgsql-hackers
Robert Haas <robertmhaas@gmail.com> writes:
> ... if
> we want to regard no-superusers as a supported configuration, we
> probably need to tighten that up. I think it's kind of hopeless,

Yeah, I agree.  At least, I'm uninterested in spending any of my
own time trying to make that usefully-more-secure than it is today.
If somebody else is interested enough to do the legwork, we can
look at what they come up with.

            regards, tom lane



pgsql-hackers by date:

Previous
From: Robert Haas
Date:
Subject: Re: let's disallow ALTER ROLE bootstrap_superuser NOSUPERUSER
Next
From: Alvaro Herrera
Date:
Subject: Re: PG 15 (and to a smaller degree 14) regression due to ExprEvalStep size