Re: Hardening PostgreSQL via (optional) ban on local file system access - Mailing list pgsql-hackers

From Jeff Davis
Subject Re: Hardening PostgreSQL via (optional) ban on local file system access
Date
Msg-id b139681f3f24416536c0193fe6cc2fac0ceb8e5d.camel@j-davis.com
Whole thread Raw
In response to Re: Hardening PostgreSQL via (optional) ban on local file system access  (Hannu Krosing <hannuk@google.com>)
List pgsql-hackers
On Tue, 2022-06-28 at 23:18 +0200, Hannu Krosing wrote:
> I was not after *completely* removing it, but just having an option
> which makes the superuser() function always return false.

Did you test that? I'm guessing that would cause lots of problems,
e.g., installing extensions.

Regards,
    Jeff Davis





pgsql-hackers by date:

Previous
From: Michael Paquier
Date:
Subject: Re: Allowing REINDEX to have an optional name
Next
From: Jeff Davis
Date:
Subject: Re: Export log_line_prefix(); useful for emit_log_hook.