Because rexec was considered so broken by Guido that it was removed in its
entirety. Hopefully some day it will be readded in a more secure form,
and then the plpython module can be reinstated as a trusted language.
On Thu, 26 Jun 2003, DeJuan Jackson wrote:
> Just wondering (I don't use or intend to use plpython), but why does it
> need to be marked untrusted is the rexec code has been corrected.
>
> Bruce Momjian wrote:
>
> >Patch applied. Thanks.
> >
> >---------------------------------------------------------------------------
> >
> >
> >Kevin Jacobs wrote:
> >
> >
> >>On Wed, 18 Jun 2003, Kevin Jacobs wrote:
> >>
> >>
> >>>I've worked with the Pl/Python code in the past and will see about removing
> >>>rexec and making it an untrusted language. Last time I looked, it didn't
> >>>look particularly difficult. I've set aside some time next week, so stay
> >>>tuned.
> >>>
> >>>
> >>Attached is a patch that removes all of the RExec code from plpython from
> >>the current PostgreSQL CVS. In addition, plpython needs to be changed to an
> >>untrusted language in createlang. Please let me know if there are any
> >>problems.
> >>
> >>Best regards,
> >>-Kevin
> >>
> >>--
> >>--
> >>Kevin Jacobs
> >>The OPAL Group - Enterprise Systems Architect
> >>Voice: (216) 986-0710 x 19 E-mail: jacobs@theopalgroup.com
> >>Fax: (216) 986-0714 WWW: http://www.theopalgroup.com
> >>
> >>
> >
> >Content-Description:
> >
> >[ Attachment, skipping... ]
> >
> >
> >
> >>---------------------------(end of broadcast)---------------------------
> >>TIP 2: you can get off all lists at once with the unregister command
> >> (send "unregister YourEmailAddressHere" to majordomo@postgresql.org)
> >>
> >>
> >
> >
> >
>
>
