Re: FPW compression leaks information - Mailing list pgsql-hackers

From Fujii Masao
Subject Re: FPW compression leaks information
Date
Msg-id CAHGQGwFdjbMc+FtjMDq1uZuck+rVEuCuHv8Riqvtkd+6aPYbzg@mail.gmail.com
Whole thread Raw
In response to Re: FPW compression leaks information  (Stephen Frost <sfrost@snowman.net>)
Responses Re: FPW compression leaks information  (Michael Paquier <michael.paquier@gmail.com>)
List pgsql-hackers
On Tue, Jul 7, 2015 at 11:34 PM, Stephen Frost <sfrost@snowman.net> wrote:
> * Fujii Masao (masao.fujii@gmail.com) wrote:
>> On Tue, Jul 7, 2015 at 10:31 PM, Stephen Frost <sfrost@snowman.net> wrote:
>> > I'm not following.  If we don't want the information to be available to
>> > everyone then we need to limit it, and right now the only way to do that
>> > is to restrict it to superuser because we haven't got anything more
>> > granular.
>>
>> A user can very easily limit such information by not enabling wal_compression.
>> No need to restrict the usage of WAL location functions.
>> Of course, as Michael suggested, we need to make the parameter SUSET
>> so that only superuser can change the setting, though.
>
> I agree with making it SUSET, but that doesn't address the issue.

ISTM that one our consensus is to make wal_compression SUSET
as the first step whatever approach we adopt for the risk in question
later. So, barring any objection, I will commit the attached patch
and change the context to PGC_SUSET.

Regards,

--
Fujii Masao

Attachment

pgsql-hackers by date:

Previous
From: Fujii Masao
Date:
Subject: Re: FPW compression leaks information
Next
From: Fujii Masao
Date:
Subject: Re: pg_dump quietly ignore missing tables - is it bug?