Re: pgsql: postgres_fdw: improve security checks - Mailing list pgsql-committers

From Peter Eisentraut
Subject Re: pgsql: postgres_fdw: improve security checks
Date
Msg-id 92568c98-aff9-4e98-baf3-6794866e39a6@eisentraut.org
Whole thread Raw
In response to Re: pgsql: postgres_fdw: improve security checks  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-committers
On 26.03.25 01:59, Tom Lane wrote:
> Peter Eisentraut <peter@eisentraut.org> writes:
>> postgres_fdw: improve security checks
> 
> This patch is failing on "drongo" [1].  It looks like the problem
> is that the pg_hba.conf file being used doesn't allow for TCP
> loopback connections.
> 
> To make that safe, the test would have to be changed to not run by
> default.  We could gate it with a PG_TEST_EXTRA check ... but the
> end result would likely be that it gets run by just about nobody.
> I wonder whether it's worth the trouble.

This has been fixed.




pgsql-committers by date:

Previous
From: Peter Eisentraut
Date:
Subject: pgsql: dblink: SCRAM authentication pass-through
Next
From: Daniel Gustafsson
Date:
Subject: pgsql: psql: Make test robust against locale variations