Re: Add on_trusted_init and on_untrusted_init to plperl [PATCH]

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: Add on_trusted_init and on_untrusted_init to plperl [PATCH]
Дата
Msg-id 17141.1264698778@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: Add on_trusted_init and on_untrusted_init to plperl [PATCH]  (Andrew Dunstan <andrew@dunslane.net>)
Ответы Re: Add on_trusted_init and on_untrusted_init to plperl [PATCH]
Список pgsql-hackers
Andrew Dunstan <andrew@dunslane.net> writes:
> Tom Lane wrote:
>> Isn't it a security hole if on_trusted_init is USERSET?  That means
>> an unprivileged user can determine what will happen in plperlu.
>> SUSET would be saner.

> ITYM on_untrusted_init.

Right, sorry, got 'em backwards.
        regards, tom lane


В списке pgsql-hackers по дате отправления: