Re: plperl Safe restrictions - Mailing list pgsql-hackers

From Tom Lane
Subject Re: plperl Safe restrictions
Date
Msg-id 9385.1097853365@sss.pgh.pa.us
Whole thread Raw
In response to Re: plperl Safe restrictions  (Andrew Dunstan <andrew@dunslane.net>)
List pgsql-hackers
Andrew Dunstan <andrew@dunslane.net> writes:
> You can now - it's part of :base_math. What we should do, however, is 
> disallow is calling srand, since pg goes to quite a bit of trouble to 
> seed the PRNG.

But changing the PRNG seed within one backend is not a security issue.
At least, we allow anyone to do "SET SEED" or call setseed, so I don't
see any reason to disallow it in plperl.

In general I'm pretty sure that no one has reviewed the list of
restrictions carefully, so by all means send in a patch once you've
done so.
        regards, tom lane


pgsql-hackers by date:

Previous
From: "Dave Page"
Date:
Subject: Re: get_progname and .exe suffix
Next
From: Tom Lane
Date:
Subject: Re: plperl Safe restrictions