AW: Increased SECURITY RISCS from omitting some compikler options when building PG with meson; e.g. -fcf-protection=full - Mailing list pgsql-hackers

From Hans Buschmann
Subject AW: Increased SECURITY RISCS from omitting some compikler options when building PG with meson; e.g. -fcf-protection=full
Date
Msg-id f2761ed18e744f1993935c0e05aca2ee@nidsa.net
Whole thread
Responses Re: Increased SECURITY RISCS from omitting some compikler options when building PG with meson; e.g. -fcf-protection=full
List pgsql-hackers

Hello Matthias,


Thank you for pointing me to the pg_config options. I didn't know and will take a look.



> If the normal user cannot handle compiler options, then should they
> really be self-compiling PostgreSQL with custom compiler options, for
> a platform that already has pre-compiled binary distributions?

As already mentioned in my original post, there are some cases a "normal" user (in my terminology it is a db responsible not experienced with C programming practice) may use a manual recompile:

- blocksize change
- emergency patch: see current planet postgres:
- test on beta versions of the OS
- etc...


The user should be able to recompile the package (which is really very easy with meson after some setup of developer packages) without deeper knowledge of C programming with the original configuration of the distribution.

In production I use the binary distribution from PGDG and additionally compile the latest/beta versions for a compatibility check.

Best regards

Hans Buschmann

pgsql-hackers by date:

Previous
From: Tatsuro Yamada
Date:
Subject: RE: Add enable_groupagg GUC parameter to control GroupAggregate usage
Next
From: Ashutosh Bapat
Date:
Subject: GRANT ... TABLE for property graph