Re: Patch for - Allow server logs to be remotely read

Tom Lane wrote:
> Bruce Momjian <pgman@candle.pha.pa.us> writes:
> > Is that wrong?  Yes.  Looking at the C file, I see what you mean.  Let
> > me update the README.adminpack file.  read_file is already in the
> > backend code, and was in 8.1.X too.
>
> I wonder if we should take pg_read_file (and the rest of genfile.c)
> back out of the backend and stick them into contrib/adminpack.  The
> argument for having them in the backend was always pretty weak to me.
> In particular, a DBA who doesn't want them in his system for security
> reasons has no simple way to get rid of them if they're in core, but
> not installing a contrib module is easy enough.

I thought about that but what we have in the backend now is read-only
which basically could be done using COPY, so I don't see any security
value to moving them out.  They are super-user only just like COPY.

--
  Bruce Momjian   http://candle.pha.pa.us
  EnterpriseDB    http://www.enterprisedb.com

  + If your life is a hard drive, Christ can be your backup. +