Re: [HACKERS] search path security issue? - Mailing list pgsql-hackers

From David G. Johnston
Subject Re: [HACKERS] search path security issue?
Date
Msg-id CAKFQuwZGb5iKofrod8vindK0Xv0YKj_ZO7O72+OTiPFn7Ug4Vw@mail.gmail.com
Whole thread Raw
In response to [HACKERS] search path security issue?  ("Joshua D. Drake" <jd@commandprompt.com>)
Responses Re: [HACKERS] search path security issue?
List pgsql-hackers
On Thu, Oct 5, 2017 at 2:37 PM, Joshua D. Drake <jd@commandprompt.com> wrote:
I get being able to change my search_path on the fly but it seems odd that as user foo I can change my default search path?

Seems down-right thoughtful of us to allow users to change their own defaults instead of forcing them to always change things on-the-fly or bug a DBA to change the default for them.

David J.

pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: [HACKERS] search path security issue?
Next
From: Nico Williams
Date:
Subject: [HACKERS] fork()-safety, thread-safety